Câu 13: NSE7_SOC_AR-7.6: Fortinet NSE 7 - Security Operations 7.6 Architect

Refer to the exhibit. You are investigating an open incident and want to add records from the Tickets module, a custom module, to the visual correlation widget. Assume there are already linked ticket records to the incident. How do you accomplish this?

1. A. Edit the incident template and add the Tickets module to the graph. — đáp án hiện tại
2. B. Define move module relationships under Correlation Settings.
3. C. Tag ticket records with the incident ID.
4. D. Ingest ticket records through a custom connector.