Palo_Alto_Networks
XSOAR-ENGINEER · Question #22
XSOAR-ENGINEER Question #22: Real Exam Question with Answer & Explanation
The correct answer is B. Visible within Context Data and fully accessible. When an incident is reassigned to a new type, any fields no longer associated with that type are removed from the layout but the data remains stored in Context Data. This ensures the information is fully accessible for automations, playbooks, or further analysis, even if it's not
Question
When re-assigning an existing incident to a new incident type, an engineer is concerned about the preservation of critical data currently stored in fields that are only associated to the original incident type. Upon making the change, in which state will the critical data be in the now unassociated fields?
Options
- AHidden from the Context Data but accessible
- BVisible within Context Data and fully accessible
- CVisible with Context Data, grayed out, and fully accessible
- DHidden from Context Data and no longer accessible
Explanation
When an incident is reassigned to a new type, any fields no longer associated with that type are removed from the layout but the data remains stored in Context Data. This ensures the information is fully accessible for automations, playbooks, or further analysis, even if it's not shown in the new incident layout.
Community Discussion
No community discussion yet for this question.