ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCSAE All Questions

View all questions & answers for the PCSAE exam
Go to Exam

Exam PCSAE topic 1 question 53 discussion

Actual exam question from Palo Alto Networks's PCSAE
Question #: 53
Topic #: 1
[All PCSAE Questions]

How would context data be filtered to receive only malicious indicator values with DBotScore?

  • A. Get DBotScore.value where DBotScore.Score (Larger or equals) 4
  • B. Get DBotScore.value where DBotScore.Score (equals (int)) 3
  • C. Get DBotScore where DBotScore.Score (Larger than) 1
  • D. Get DBotScore where DBotScore.Score (Larger or equals) 2
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Reference:
https://github.com/demisto/content/blob/master//Packs/DeprecatedContent/Integrations/PaloAlto_MineMeld/README.md
by news088 at Oct. 10, 2023, 9:28 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
chucklepie
10 months ago
This question makes no sense. 'Malicious' is not a dbotscore. Bad is so if you equate malicious to bad it is '3'. However there is no property 'value' for DBotScore. So there are no answers correct. So the question is just badly worded. So A if you think dbotscore.value (which does not exist) or D but value 2 equates to 'Suspicious'...
upvoted 2 times
chucklepie
10 months ago
Whoops, B if you want to use '3' as the answer and D for Suspicious.
upvoted 1 times
...
...
news088
1 year ago
some info about dbot score. 0-1-2-3 https://xsoar.pan.dev/docs/integrations/dbot
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago