A responder wants to start a playbook manually from an incident form. Which action should be used?

AAdd Playbook from the form UI action dropdown

BConvert to Security Incident from the observables table

CEdit dashboard scope from workspace

DSend Observable to TISC from Setup Assistant

More Automation and Standard Processes Questions

60 questions

Full Certified Implementation Specialist - Security Incident Response Practice Test

All topics covered

All Certified Implementation Specialist - Security Incident Response Questions

Browse by topic

Related Questions

An incident already has a specific playbook attached and it is still active. What happens if the ana...

easy

What is the primary purpose of Setup Assistant in SIR?...

easy

How should security incident groups be configured for role inheritance to work as intended?...

easy

How does user reported phishing create a security incident in SIR?...

easy

A team built automation in Flow Designer and expects the playbook component to show it as a playbook...

medium

View all Automation and Standard Processes questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.