Palo_Alto_Networks
PCSAE · Question #27
An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?
The correct answer is A. Create a new indicator type and disable the built-in IP indicator. https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/manage- indicators/understand-indicators/indicator-types/indicator-type-profile.html
Deployment and Configuration
Question
An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?
Options
- ACreate a new indicator type and disable the built-in IP indicator
- BEdit the regex of the default IP Indicator
- CAdd a new server configuration key that will overwrite the default regex of the IP indicator
- DDelete the default IP indicator
How the community answered
(28 responses)- A86% (24)
- B4% (1)
- C4% (1)
- D7% (2)
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/manage- indicators/understand-indicators/indicator-types/indicator-type-profile.html
Topics
#indicator types#regex customization#IP indicators#custom indicators
Community Discussion
No community discussion yet for this question.