Palo_Alto_Networks
PSE-PLATFORM · Question #195
On March 10, 2016, between 11:00 am and 11:30 am, users reported that web-browsing traffic to the IP address 1.1.1.1 failed. Which filter can be applied to the traffic logs to show how many users…
The correct answer is B. ( time_generated geq `2016/03/10 11:00:00') and ( time_generated leq `2016/03/10 11:30:00') and ( addr.dst in 1.1.1.1). You've hit your limit · resets 5am (America/New_York)
Monitoring and Reporting
Question
On March 10, 2016, between 11:00 am and 11:30 am, users reported that web-browsing traffic to the IP address 1.1.1.1 failed. Which filter can be applied to the traffic logs to show how many users were affected during this time frame?
Options
- A( time_generated leq `2016/03/10 11:30:00') and ( app is web-browsing )
- B( time_generated geq
2016/03/10 11:00:00') and ( time_generated leq2016/03/10 11:30:00') and ( addr.dst in 1.1.1.1) - C( time_generated leq
2016/03/10 11:00:00') and ( time_generated geq2016/03/10 11:30:00') and ( app eq web-browsing ) - D( time_generated geq
2016/03/10 11:00:00') and ( time_generated leq2016/03/10 11:30:00') and ( app neq web-browsing )
How the community answered
(38 responses)- A3% (1)
- B79% (30)
- C8% (3)
- D11% (4)
Explanation
You've hit your limit · resets 5am (America/New_York)
Topics
#Traffic Log Filtering#Log Query Syntax#Log Analysis#Time-Based Filtering
Community Discussion
No community discussion yet for this question.