Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 75
Select the correct incident life cycle on XSOAR.
Answer options
- A. Planning > Incident Ingestion > Incident Creation > Mapping and Classification > Pre-processing > Playbook runs > Post-processing
- B. Planning > Incident Ingestion > Pre-processing > Incident Creation > Mapping and Classification > Playbook runs > Post-processing
- C. Planning > Incident Ingestion > Pre-processing > Mapping and Classification > Incident Creation > Playbook runs > Post-processing
- D. Planning > Incident Ingestion > Mapping and Classification > Pre-processing > Incident Creation > Playbook runs > Post-processing
Correct answer: D
Explanation
The correct answer is D because it follows the logical order of handling an incident: first, the incident is ingested and classified, then pre-processed before creating the incident record. The other options misplace the incident creation step, which should occur after mapping and classification to ensure accurate incident handling.