Palo_Alto_Networks

PCSAE · Question #100

You need to retrieve a list of all malicious hashes over the last 30 days. What is the correct query to use?

The correct answer is D. type:File verdict:Malicious sourcetimestamp:>="30 days ago". See the full explanation below for the reasoning.

Question

You need to retrieve a list of all malicious hashes over the last 30 days. What is the correct query to use?

Options

Atype:File reputation:Malicious sourcetimestamp:"30 days ago"
Btype:File verdict:Malicious sourcetimestamp:<="30 days ago"
Ctype:File reputation:Malicious sourcetimestamp:="30 days ago"
Dtype:File verdict:Malicious sourcetimestamp:>="30 days ago"

How the community answered

(21 responses)

A
5% (1)
B
5% (1)
C
10% (2)
D
81% (17)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full PCSAE Practice