nerdexam
Palo_Alto_Networks

XSOAR-ENGINEER · Question #7

Which feature is used to convert event data values into incident fields when an integration fetches an event?

The correct answer is B. Mapping. When an integration fetches events, XSOAR uses mapping to convert event data values into incident fields. Classification determines the incident type, but mapping is the step that assigns specific event data to the corresponding incident fields.

Integration and Data Ingestion

Question

Which feature is used to convert event data values into incident fields when an integration fetches an event?

Options

  • AClassification
  • BMapping
  • CField configuration
  • DLayout configuration

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    87% (41)
  • C
    2% (1)
  • D
    6% (3)

Explanation

When an integration fetches events, XSOAR uses mapping to convert event data values into incident fields. Classification determines the incident type, but mapping is the step that assigns specific event data to the corresponding incident fields.

Topics

#mapping#incident fields#event ingestion#integration configuration

Community Discussion

No community discussion yet for this question.

Full XSOAR-ENGINEER Practice