Palo_Alto_Networks
XDR-ANALYST · Question #85
XDR-ANALYST Question #85: Real Exam Question with Answer & Explanation
Sign in or unlock XDR-ANALYST to reveal the answer and full explanation for question #85. The question stem and answer options stay visible for context.
Question
What should you do to automatically convert leads into alerts after investigating a lead?
Options
- ALead threats can't be prevented in the future because they already exist in the environment.
- BCreate IOC rules based on the set of the collected attribute-value pairs over the affected entities
- CCreate BIOC rules based on the set of the collected attribute-value pairs over the affected entities
- DBuild a search query using Query Builder or XQL using a list of lOCs.
Unlock XDR-ANALYST to see the answer
You've previewed enough free XDR-ANALYST questions. Unlock XDR-ANALYST for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.