Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 103

What happens if both a Classifier and Incident Type are configured in an integration instance's settings?

Answer options

• A. The administrator will receive a notification that there is both a Classifier and Incident Type set for that integration instance.
• B. The Incident Type will be ignored, and incoming incidents will be classified according to the Classifier.
• C. The Classifier will be ignored, and incoming incidents will be classified according to the Incident Type.
• D. Both the Classifier and Incident Type will classify incoming incidents.

Correct answer: B

Explanation

The correct answer is B because when both a Classifier and an Incident Type are present, the integration prioritizes the Classifier for categorizing incoming incidents. Options A, C, and D are incorrect as they misrepresent how the system processes these settings, either suggesting notifications or incorrectly prioritizing the Incident Type.