Which consideration should be given to the position of rule tests that evaluate regular expressions (Regex tests)?

Which consideration should be given to the position of rule tests that evaluate regular expressions (Regex tests)?
A . They can only be used in Building Blocks to ensure they are evaluated as infrequently as possible.
B . They are usually the most specific. As such, they should appear first in the order.
C . They are usually the most expensive. As such, they should appear last in the order.
D . They are stateful tests. As such QRadar automatically evaluates them last.

View Answer

Answer: A

Explanation:

Reference: https://towardsdatascience.com/everything-you-need-to-know-about-regular-expressions-8f622fe10b03