Palo_Alto_Networks
CLOUDSEC-PRO · Question #22
Which two are considered common indicator types in Cortex Cloud threat intelligence? (Choose two)
The correct answer is A. IP address B. File checksum (hash). Indicators of Compromise (IoCs) include network-related identifiers like IP addresses and file- based identifiers such as hashes. These are crucial for detection, correlation, and automated blocking in Cortex Cloud threat workflows.
Cloud Security Platform Operations
Question
Which two are considered common indicator types in Cortex Cloud threat intelligence? (Choose two)
Options
- AIP address
- BFile checksum (hash)
- CCalendar event
- DPhysical printer location
How the community answered
(60 responses)- A85% (51)
- C10% (6)
- D5% (3)
Explanation
Indicators of Compromise (IoCs) include network-related identifiers like IP addresses and file- based identifiers such as hashes. These are crucial for detection, correlation, and automated blocking in Cortex Cloud threat workflows.
Topics
#Cortex Cloud#IoC types#IP indicators#file hashes
Community Discussion
No community discussion yet for this question.