Palo_Alto_Networks
PCSAE · Question #147
A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?
The correct answer is A. -status:closed -category:job type:Phishing created:>="30 days ago". See the full explanation below for the reasoning.
Question
A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?
Options
- A-status:closed -category:job type:Phishing created:>="30 days ago"
- Bstatus:closed -category:job & type:Phishing created:>="30 days ago"
- C-status:closed -category:job & type:Phishing created:<="30 days ago"
- D-status:closed -category:job type:Phishing created:="30 days ago"
How the community answered
(60 responses)- A83% (50)
- B5% (3)
- C2% (1)
- D10% (6)
Community Discussion
No community discussion yet for this question.