Palo Alto Networks System Engineer – Strata — Question 40

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.
How is this goal accomplished?

Answer options

• A. Create a custom spyware signature matching the known signature with the time attribute
• B. Add a correlation object that tracks the occurrences and triggers above the desired threshold
• C. Submit a request to Palo Alto Networks to change the behavior at the next update
• D. Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

Correct answer: A

Explanation

The correct answer is A because creating a custom spyware signature allows for specific conditions, including a time attribute, to be defined. Options B and D involve different methods that don't directly address triggering a specific signature based on a defined rate of occurrence. Option C is not viable since requesting a change from Palo Alto Networks does not provide a solution for the immediate need.