Palo Alto Networks System Engineer – Cortex — Question 31

What does DBot use to score an indicator that has multiple reputation scores?

Answer options

• A. most severe score
• B. undefined score
• C. average score
• D. least severe score

Correct answer: A

Explanation

DBot uses the most severe score to ensure that the highest level of risk associated with an indicator is taken into account. The undefined score does not provide actionable information, while the average score might dilute the severity of risks, and the least severe score would not reflect the potential threat level accurately.