PSE-CORTEX practice question 24 of 25

Cortex XSOAR has extracted a malicious IP address involved in command-and-control traffic. What is the best method to automatically block this IP from communicating with endpoints without requiring a configuration change on the firewall?

Full set: 168 questions
Answer options
A: Create a NetOps ticket requesting a configuration change to the firewall to block the IP.
B: Add the IP address to an external dynamic list used by the firewall.
C: Add the IP address to a threat intelligence management malicious IP list to elevate priority of future alerts. Correct answer
D: Block the IP address by creating a deny rule in the firewall.
Correct Answer:
C. Add the IP address to a threat intelligence management malicious IP list to elevate priority of future alerts.
Explanation

Reference: https://xsoar.pan.dev/docs/reference/playbooks/block-ip---generic-v3

Keep practicing

Take the free PSE-CORTEX practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other PSE-CORTEX practice questions

Scroll to Top