Palo Alto Networks XSOAR Engineer — Question 8

Within the playbook editor, which function allows a user to associate a task output to an incident field?

Answer options

• A. Classification
• B. Inputs
• C. Extend context
• D. Mapping

Correct answer: C

Explanation

The correct answer is C, 'Extend context,' as it specifically allows users to connect the results of a task to an incident field. The other options, while relevant to the playbook editor, do not facilitate the direct association of task output to incident fields.