Câu 16: XSIAM-ANALYST: Palo Alto Networks Certified XSIAM Analyst

While investigating an alert, an analyst notices that a URL indicator has a related alert from a previous incident. The related alert has the same URL, but it resolved to a different IP address. Which combination of two actions should the analyst take to resolve this issue? (Choose two.)

1. A. Enrich the IP address indicator associated with the previous alert.
2. B. Expire the URL indicator.
3. C. Remove the relationship between the URL and the older IP address. — đáp án hiện tại
4. D. Enrich the URL indicator. — đáp án hiện tại