Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 72

Which two functions in XSOAR are incident types used for? (Choose two.)

Answer options

• A. To run dedicated playbooks for different event types
• B. To classify events ingested from various sources into the relevant types
• C. To classify indicators extracted in XSOAR incidents to their respective types
• D. To facilitate role based access to XSOAR incidents

Correct answer: B, C

Explanation

The correct answers, B and C, highlight the role of incident types in organizing and classifying both events and indicators within XSOAR. Option A is incorrect because playbooks are not limited to incident types, and option D does not pertain to the classification functions of incident types.