Exam XSIAM-Analyst Topic 1 Question 31 Discussion
Actual exam question for Palo Alto Networks's XSIAM-Analyst exam
Question #: 31
Topic #: 1
Question #: 31
Topic #: 1
Which two statements apply to IOC rules? (Choose two.)
Suggested Answer: A,C Vote an answer
Cortex allows for the programmatic management of IOCs, enabling security teams to automate the ingestion of indicators from external threat intelligence platforms or custom scripts via the REST API.
IOC rules are designed to identify specific artifacts on an endpoint. This includes not only file hashes and IP addresses but also specific Registry Keys or paths that are known to be associated with malicious activity.
IOC rules are designed to identify specific artifacts on an endpoint. This includes not only file hashes and IP addresses but also specific Registry Keys or paths that are known to be associated with malicious activity.
by Jeremy at Sep 08, 2026, 10:14 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).