Which statement correctly describes how inbound Security Operations email is handled after it reaches a configured email address?

Question

Accepted Answer

A. Emails are stored in an email events table and processed against email parsers; matched emails are flagged matched and linked to a created or updated record, while unmatched emails can be reprocessed. Emails sent to Security Operations email addresses are stored in an email events table and processed against email parsers. Matched emails are flagged matched and linked to the created or updated record, while unmatched emails are listed and can be reprocessed. Option D is wrong because email events are deleted after 30 days by default rather than kept forever or removed immediately based on match status.

Which statement correctly describes how inbound Security Operations email is handled after it reaches a configured email address?

Related Questions

Discussion