Exam PCSAE Topic 2 Question 151 Discussion

Actual exam question for Palo Alto Networks's PCSAE exam
Question #: 151
Topic #: 2

An engineer's organization system is registered in the following manner: <SiteName-SystemID- Username>. The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate 'User' indicator automatically once a system is found.
What is the most efficient way for the engineer to achieve this?

A. Change the reputation command for the internal system indicator type B. Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning C. Create a new indicator type of the internal username and set a formatting script to extract only the username D. Create a custom indicator field named 'username' and link it to the internal system indicator

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business