Using the above screenshot of the ACC, what is the best method to set a global filter, narrow down Blocked User Activity, and locate the user(s) that could be compromised by a botnet?
A.
Click the hyperlink for the ZeroAccess.Gen threat.
B.
Click the source user with the highest threat count.
C.
Click the left arrow beside the ZeroAccess.Gen threat.
D.
Click the hyperlink for the botnet Threat Category.
After hovering over one of the options, an arrow pointing to the left will appear, it means "apply global filter". A global filter means that even if you go to other tabs of the ACC (like Network Activity or Threat Activity) the dashboards will still show information related to the thing the global filter was applied for. You can check it on a fw acc yourself or check it at part 5/6 (ACC, Logging, and Reporting) of the Beacon "Tuning Firewall Context" course
Set a global filter from a table.
Hover over an attribute in the table below the chart and click the arrow icon to the right of the attribute.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-the-application-command-center/interact-with-the-acc#id5cc39dae-04cf-4936-9916-1a4b0f3179b9
You've been tricked. Hyperlink doesn't create a global filter, it's C
upvoted 3 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
evilCorpBot7494
3 months, 2 weeks agoZeruz
11 months, 2 weeks agoblahblah1234567890000
1 year, 1 month agoNicolao
1 year, 3 months agokewokil120
1 year, 4 months agoMarbot
1 year, 4 months agojuangsap
1 year, 6 months agoevdw
1 year, 6 months agomagicbr3
6 months, 1 week ago