Skip to content
CIS-SIR
Security Incident and Threat Intelligence Integrations
medium
Question 3 of 28

An analyst wants to manually send observables from a security incident to TISC. Which path is correct?

AOpen the security incident, use Related Records or Investigation tab, select observables, then choose Send Observable to TISC
BOpen Setup Assistant, select the dashboard, and choose Send Observable to TISC
COpen the observables list outside the incident and use Convert to Security Incident
DOpen Microsoft Graph alert profiles and select Push to TISC

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion