Palo_Alto_Networks
XSIAM-ANALYST · Question #51
A security analyst is reviewing alerts and incidents associated with internal vulnerability scanning performed by the security operations team. Which built-in incident domain will be assigned to…
The correct answer is C. IT. Alerts from routine internal vulnerability scanning are operational/maintenance activity, so Cortex XSIAM assigns them to the built-in IT incident domain rather than Security or Hunting.
Incident Management
Question
A security analyst is reviewing alerts and incidents associated with internal vulnerability scanning performed by the security operations team. Which built-in incident domain will be assigned to these alerts and incidents in Cortex XSIAM?
Options
- ASecurity
- BHunting
- CIT
- DHealth
How the community answered
(22 responses)- B5% (1)
- C91% (20)
- D5% (1)
Explanation
Alerts from routine internal vulnerability scanning are operational/maintenance activity, so Cortex XSIAM assigns them to the built-in IT incident domain rather than Security or Hunting.
Topics
#incident domain#vulnerability scanning#incident classification#IT domain
Community Discussion
No community discussion yet for this question.