nerdexam
Palo_Alto_Networks

PCSAE · Question #15

How would context data be filtered to receive only malicious indicator values with DBotScore?

The correct answer is B. Get DBotScore.value where DBotScore.Score (equals (int)) 3. https://github.com/demisto/content/blob/master//Packs/DeprecatedContent/Integrations/ PaloAlto_MineMeld/README.md

Playbook Design and Development

Question

How would context data be filtered to receive only malicious indicator values with DBotScore?

Options

  • AGet DBotScore.value where DBotScore.Score (Larger or equals) 4
  • BGet DBotScore.value where DBotScore.Score (equals (int)) 3
  • CGet DBotScore where DBotScore.Score (Larger than) 1
  • DGet DBotScore where DBotScore.Score (Larger or equals) 2

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    85% (35)
  • C
    7% (3)
  • D
    5% (2)

Explanation

https://github.com/demisto/content/blob/master//Packs/DeprecatedContent/Integrations/ PaloAlto_MineMeld/README.md

Topics

#DBotScore#context filtering#malicious indicators#threat scoring

Community Discussion

No community discussion yet for this question.

Full PCSAE Practice