Which three sources are used by the firewall as the basis of this score?

The botnet report displays a confidence score of 1 to 5 indicating the likelihood of a botnet infection.

Which three sources are used by the firewall as the basis of this score? (Choose three.)
A . Bad Certificate Reports
B . Traffic Type
C . Botnet Reports
D . Number of Events
E . Executable Downloads
F . Threat Landscape

Answer: B,D,E

Explanation:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/monitoring/generate-botnet-reports