palo-alto · PSE-Strata · Q603 · multiple_choice · topic_1

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 h…

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds. How is this goal accomplished?

A.Create a custom spyware signature matching the known signature with the time attribute
B.Add a correlation object that tracks the occurrences and triggers above the desired threshold
C.Submit a request to Palo Alto Networks to change the behavior at the next update
D.Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

Explanation

https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/create-a-custom-threat-signature/create-a-combination-signature

Reference: examtopics_top_comment

Practice with progress tracking

Start tracked practice Pricing