Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 21
Which two situations would an engineer consider when configuring classification and mapping for an incident type? (Choose two.)
Answer options
- A. When creating incidents from the XSOAR REST API
- B. When manually creating an incident from the UI
- C. When adding a new analyst account to XSOAR
- D. When fetching many different incident types from a single mailbox
Correct answer: A, B
Explanation
The correct answers are A and B because these situations directly involve the creation of incidents where classification and mapping are necessary. Options C and D are not relevant to the configuration of incident types, as they pertain to user account management and mailbox operations, respectively.