A team is mapping a task to incident response planning, incident management, threat intelligence, and incident handling. Which choice best supports the need to choose the incident-handling activity that groups events into meaningful incident types?

Question

Accepted Answer

B. Incident categorization. Incident categorization is correct because Palo Alto Networks ties it to incident response planning, incident management, threat intelligence, and incident handling. That makes it the best fit when the practitioner needs to choose the incident-handling activity that groups events into meaningful incident types. File indicators is not correct because it addresses a different requirement within Threat Intelligence and Incident Response.

A team is mapping a task to incident response planning, incident management, threat intelligence, and incident handling. Which choice best supports the need to choose the incident-handling activity that groups events into meaningful incident types?

Related Questions

Discussion