Palo_Alto_Networks
XDR-ANALYST · Question #85
What should you do to automatically convert leads into alerts after investigating a lead?
Sign in or unlock XDR-ANALYST to reveal the answer and full explanation for question #85. The question stem and answer options stay visible for context.
Threat Hunting and Investigation
Question
What should you do to automatically convert leads into alerts after investigating a lead?
Options
- ALead threats can't be prevented in the future because they already exist in the environment.
- BCreate IOC rules based on the set of the collected attribute-value pairs over the affected entities
- CCreate BIOC rules based on the set of the collected attribute-value pairs over the affected entities
- DBuild a search query using Query Builder or XQL using a list of lOCs.
Unlock XDR-ANALYST to see the answer
You've previewed enough free XDR-ANALYST questions. Unlock XDR-ANALYST for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IOC rules#lead investigation#alert creation#threat hunting