Palo_Alto_Networks
CLOUDSEC-PRO · Question #27
In Cortex Cloud, domain indicators are typically used to:
The correct answer is A. Identify malicious command-and-control infrastructure. Domain IoCs allow SOC teams to detect and block communication with malicious domains, particularly those used in command-and-control activities during advanced attacks.
Threat Intelligence and Indicators
Question
In Cortex Cloud, domain indicators are typically used to:
Options
- AIdentify malicious command-and-control infrastructure
- BChange DNS hosting providers
- CMonitor SSL certificate expiration
- DBlock advertising websites for productivity
How the community answered
(45 responses)- A78% (35)
- B13% (6)
- C7% (3)
- D2% (1)
Explanation
Domain IoCs allow SOC teams to detect and block communication with malicious domains, particularly those used in command-and-control activities during advanced attacks.
Topics
#domain indicators#threat intelligence#C2 infrastructure#IoC types
Community Discussion
No community discussion yet for this question.