Question

A SOC analyst is reviewing a Python snippet used to process alerts returned by a threat intelligence REST API. The API returns a JSON payload assigned to the variable 'data'. The relevant structure is: {"alerts": [{"id": 101, "severity": "high"}, {"id": 102, "severity": "low"}]}. The analyst needs the script to print the ID of every alert whose severity is 'high'. Which code block correctly accomplishes this?

Accepted Answer

for alert in data["alerts"]:
    if alert["severity"] == "high":
        print(alert["id"])

Answer

for alert in data.alerts:
    if alert.severity == "high":
        print(alert.id)

Answer

if data["alerts"]["severity"] == "high":
    print(data["alerts"]["id"])

Answer

for alert in data["severity"]:
    if alert == "high":
        print(data["id"])