Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 2

When viewing the incident directly, what is the “assigned to” field value of a new Incident that was just reported to Cortex?

Answer options

• A. Pending
• B. It is blank
• C. Unassigned
• D. New

Correct answer: C

Explanation

The correct answer is 'Unassigned' because a new Incident in Cortex is initially not assigned to any specific user. 'Pending' and 'New' do not accurately describe the state of the assignment, while 'It is blank' does not convey the system's behavior correctly.