Palo Alto Networks System Engineer – Cortex — Question 28

Which two actions are required to add indicators to the whitelist? (Choose two.)

Answer options

• A. Click "New Whitelisted Indicator" in the Whitelist page.
• B. Upload an external file named "whitelist" to the Whitelist page.
• C. Upload an external file named "whitelist" to the Indicators page.
• D. Select the indicators and click "Delete and Whitelist" in the Indicators page.

Correct answer: A, D

Explanation

The correct actions to add indicators to the whitelist are to click 'New Whitelisted Indicator' and select indicators to delete and whitelist them. Options B and C are incorrect because uploading the file is not a required action for whitelisting indicators, and option D is the correct action but requires the selection of indicators first.