To create a BIOC rule with XQL query you must at a minimum filter on which field in order for it to be a valid BIOC rule?

A. causality_chain

B. endpoint_name

C. threat_event

D. event_type








 

Suggested Answer: D

Community Answer: D



This question is in PCDRA Palo Alto Networks Certified Detection and Remediation Analyst Exam
For getting Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Palo Alto Networks. 
Trademarks, certification & product names are used for reference only and belong to Palo Alto Networks.
The website does not contain actual questions and answers from Palo Alto Networks's Certification Exams.