Palo_Alto_Networks
XSIAM-ANALYST · Question #47
A SOC team member implements an incident starring configuration, but incidents created before this configuration were not starred. What is the cause of this behavior?
Sign in or unlock XSIAM-ANALYST to reveal the answer and full explanation for question #47. The question stem and answer options stay visible for context.
Incident Management
Question
A SOC team member implements an incident starring configuration, but incidents created before this configuration were not starred. What is the cause of this behavior?
Options
- AThe analyst must manually star incidents after determining which alerts within the incident were
- BStarring configuration is applied to the newly created alerts, and the incident is subsequently
- CIt takes 48 hours for the configuration to take effect.
- DStarring is applied to alerts after they have been merged into incidents, but incidents are not
Unlock XSIAM-ANALYST to see the answer
You've previewed enough free XSIAM-ANALYST questions. Unlock XSIAM-ANALYST for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#incident starring#alert configuration#incident creation#SOC workflow