During daily security operations, an analyst must identify the activity used to classify an incident by type. Which concept or feature should they use?

Question

Accepted Answer

A. Incident categorization. Incident categorization is correct because Palo Alto Networks ties it to incident response planning, incident management, threat intelligence, and incident handling. That makes it the best fit when the practitioner needs to identify the activity used to classify an incident by type. False negative is not correct because it addresses a different requirement within Threat Intelligence and Incident Response.

During daily security operations, an analyst must identify the activity used to classify an incident by type. Which concept or feature should they use?

Related Questions

Discussion