Palo_Alto_Networks
XSOAR-ENGINEER · Question #28
Within the playbook editor, which function allows a user to associate a task output to an incident field?
The correct answer is C. Extend context. In the playbook editor, Extend Context is used to take a task's output and save it into the incident's context data. From there, it can be mapped or directly associated with an incident field for use in investigation, automation, or reporting.
Automation and Playbook Development
Question
Within the playbook editor, which function allows a user to associate a task output to an incident field?
Options
- AClassification
- BInputs
- CExtend context
- DMapping
How the community answered
(15 responses)- A7% (1)
- C93% (14)
Explanation
In the playbook editor, Extend Context is used to take a task's output and save it into the incident's context data. From there, it can be mapped or directly associated with an incident field for use in investigation, automation, or reporting.
Topics
#extend context#playbook editor#incident field mapping#task output
Community Discussion
No community discussion yet for this question.