Palo Alto Networks XSIAM Engineer — Question 43

Which action will prevent the automatic extraction of indicators such as IP addresses and URLs from a script's output?

Answer options

• A. Add 'ExtractIndicators': False to the script.
• B. Add 'IgnoreAutoExtract': True to the script.
• C. Use 'AutoExtract': False in the script.
• D. Set 'IndicatorExtraction': None in the script.

Correct answer: C

Explanation

'AutoExtract': False is the correct option because it directly disables the automatic extraction feature for indicators. The other options either do not exist in the context of the script's functionality or do not effectively achieve the desired outcome of preventing extraction.