Without customizing container status within Phantom, what are the three types of status for a container?

The correct answer is A. New, In Progress, Closed. Within Splunk SOAR, containers (which represent incidents, cases, or events) have a lifecycle that is tracked through their status. The default statuses available without any customization are "New", "In Progress", and "Closed". These statuses help in organizing and managing the

Splunk SOAR Environment

Question

Options

ANew, In Progress, Closed
BLow, Medium, High
CMew, Open, Resolved
DLow, Medium, Critical

How the community answered

(32 responses)

A
91% (29)
C
6% (2)
D
3% (1)

Explanation

Within Splunk SOAR, containers (which represent incidents, cases, or events) have a lifecycle that is tracked through their status. The default statuses available without any customization are "New", "In Progress", and "Closed". These statuses help in organizing and managing the incident response process, allowing users to easily track the progress of investigations and responses from initial detection through to resolution.

Topics

#container status#container management#New In Progress Closed

Community Discussion

No community discussion yet for this question.

Full SPLK-2003 Practice