vmartinez

In YARA-L, what is the equivalent of #var > 0?

 

Select one that applies, and then click Submit.

• $var
• &var
• %var
• $var = 1

 

Which optional field is required for a multi-event YARA-L rule?

 

Select one that applies, and then click Submit.

• Events
• Match
• Outcome
• Options

 

What are the required sections of a YARA-L rule?

 

Select one that applies, and then click Submit.

• Meta, events, and condition
• Meta, events, condition, and match
• Meta, events, condition, and outcome
• Meta and events

 

What are the two primary functions of the Partner Application Programming Interfaces (APIs)?

 

Select one that applies, and then click Submit.

• Provision new customers and process billing
• Ingestion metrics and process billing
• Provision new customers and rotate customer keying information
• Provision new customers and parser tools

 

Which Chronicle Security Information and Event Management (SIEM) search method allows for a “grep” like functionality?

 

Select one that applies, and then click Submit.

• Unified Data Model (UDM) Search
• Indexed Log Search
• Raw Log Search
• Entity Graph Search

 

What is the primary job of the Indexing service?

 

Select one that applies, and then click Submit.

• Index the telemetry for maximum data resiliency.
• Index the telemetry for fast retrieval.
• Return the results of a search.
• Create unique markers for data integrity.