An XSIAM Playbook is being developed to automate the analysis of newly discovered command-and-control (C2) domains. The Playbook receives a domain as input. It must perform the following actions: 1. Resolve the domain to IP addresses. 2. Perform WHOIS lookups on the domain and each resolved IP. 3. Query multiple external threat intelligence platforms (TIPS) for reputation and associated IOCs. 4. Store all collected enrichment data in the incident context and tag the incident. 5. If any TIP returns a 'malicious' verdict, block the domain and all associated IPs on a Palo Alto Networks NGFW via API. Which combination of Playbook tasks and data handling mechanisms are essential and efficient for this end-to-end automation?
Select one answer.
AI Answer Explanation & Exam Tips
Instant breakdown of key concepts, distractor analysis, and quick exam memory tricks.
Purchase Full Access to view answer options & explanation
The first 112 questions in this bank are completely free. Unlock Full Access on the exam page to view all answer choices, verified answers, explanations, and community discussions for all 373 questions.
