Câu 23: SecOps-Pro: Palo Alto Networks Security Operations Professional

What is the purpose of incident types in Cortex XSOAR?

1. A. They categorize manual and automated incidents, trigger playbooks automatically, and require predefined fields and integrations.
2. B. They assist in mapping manual incidents, assign default playbooks, and require inline auto-extraction of indicators.
3. C. They classify events ingested through integrations or the REST API, can trigger specific playbooks, and include customizable layouts and service-level agreement (SLA) parameters. — đáp án hiện tại
4. D. They manually create incidents, configure universal playbooks, and enforce strict adherence to preset service-level agreement (SLA) reminders.