Palo Alto Networks Security Operations Professional — Question 5

Which two steps belong in the Cortex XSOAR incident lifecycle? (Choose two.)

Answer options

• A. Planning
• B. Incident creation
• C. Incident notification
• D. Preparation

Correct answer: A, B

Explanation

The correct answers are A and B because 'Planning' and 'Incident creation' are key phases in the Cortex XSOAR incident lifecycle, focusing on preparation for and initiation of incident response. Options C and D, while relevant to incident management, do not specifically represent steps in the Cortex XSOAR incident lifecycle.