Palo_Alto_Networks
PCSAE · Question #8
PCSAE Question #8: Real Exam Question with Answer & Explanation
Sign in or unlock PCSAE to reveal the answer and full explanation for question #8. The question stem and answer options stay visible for context.
Question
An engineer's organization system is registered in the following manner: <SiteName-SystemID-Username>. The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate `User' indicator automatically once a system is found. What is the most efficient way for the engineer to achieve this?
Options
- ACreate a custom indicator field named `username' and link it to the internal system indicator
- BChange the reputation command for the internal system indicator type
- CCreate a new indicator type of the internal username and set a formatting script to extract only the
- DCreate a new indicator type of the internal username and have the regex included on any string
Unlock PCSAE to see the answer
You've previewed enough free PCSAE questions. Unlock PCSAE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.