Câu 11: CloudSec-Pro: Palo Alto Networks Cloud Security Professional

A threat intelligence team determines that IP addresses associated with brute force attacks on the VPN gateways are historically linked to a ransomware campaign. Which two features can be defined in Cortex to trigger alerts on the malicious objects and on specified system processes linked to the tactics, techniques, and procedures (TTPs) of the threat actors? (Choose two.)

1. A. External dynamic list
2. B. Security event anomaly
3. C. Behavioral indicator of compromise (BIOC) — đáp án hiện tại
4. D. Indicator of compromise (IOC) — đáp án hiện tại