Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 95

How would context data be filtered to receive only malicious indicator values with DBotScore?

Answer options

• A. Get DBotScore.value where DBotScore.Score (Larger or equals) 4
• B. Get DBotScore.value where DBotScore.Score (equals (int)) 3
• C. Get DBotScore where DBotScore.Score (Larger than) 1
• D. Get DBotScore where DBotScore.Score (Larger or equals) 2

Correct answer: B

Explanation

The correct answer is B because a DBotScore of 3 specifically indicates a malicious score. Options A, C, and D include scores that do not accurately target the threshold needed for identifying malicious indicators, as they either exceed or do not meet the necessary score level.