Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 125

Which Cortex XSOAR feature assigns newly ingested event attributes to incident fields?

Answer options

• A. Playbooks
• B. Classification
• C. Mapping
• D. Layouts

Correct answer: C

Explanation

The correct answer is C, Mapping, as it specifically deals with correlating event attributes to incident fields. The other options do not perform this function; Playbooks automate processes, Classification categorizes incidents, and Layouts manage the presentation of incident data.