nerdexam
Palo_Alto_Networks

PCSAE · Question #27

An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?

The correct answer is A. Create a new indicator type and disable the built-in IP indicator. https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/manage- indicators/understand-indicators/indicator-types/indicator-type-profile.html

Deployment and Configuration

Question

An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?

Options

  • ACreate a new indicator type and disable the built-in IP indicator
  • BEdit the regex of the default IP Indicator
  • CAdd a new server configuration key that will overwrite the default regex of the IP indicator
  • DDelete the default IP indicator

How the community answered

(28 responses)
  • A
    86% (24)
  • B
    4% (1)
  • C
    4% (1)
  • D
    7% (2)

Explanation

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/manage- indicators/understand-indicators/indicator-types/indicator-type-profile.html

Topics

#indicator types#regex customization#IP indicators#custom indicators

Community Discussion

No community discussion yet for this question.

Full PCSAE Practice