Ah, I see what you mean now. It's all about understanding the XSOAR terminology and how the different components fit together. I feel much more confident in my understanding of incident types after this discussion. Now, if only there was a way to get the exam questions beforehand...
You guys are on the right track. A and B are definitely the correct answers. Incident types help you run specific playbooks for different event scenarios, and they also allow you to group and classify the incoming data. C and D are more about indicator types and access controls, which are related but distinct concepts.
I agree, the wording can be a bit tricky. I think A and B are the right answers, but I'm not 100% certain. Incident types are used to categorize the overall incident, while indicator types are more for the individual components within an incident, right?
This question seems straightforward, but I'm a bit unsure about the differences between incident types and indicator types. I'm leaning towards A and B, but I want to make sure I understand the nuances.
upvoted 0 times
...
Log in to Pass4Success
Sign in:
Report Comment
Is the comment made by USERNAME spam or abusive?
Commenting
In order to participate in the comments you need to be logged-in.
You can sign-up or
login
Mitzie
6 months agoTwana
6 months agoSvetlana
6 months agoGabriele
6 months agoMoon
6 months agoLeonora
6 months ago