XSIAM-Engineer practice questions 61–62

1. Question 61 · 62 in bank

   An analyst reports to an engineer that after merging two incidents, specific custom context fields from the source incident are no longer visible in the destination incident. What is the explanation for this behavior?

   • ASource context data is moved to the Linked Incidents tab of the destination incident.
   • BWar Room entries from the source incident are deleted for security reasons.
   • CSource context data is not preserved, but War Room entries transfer to the destination incident.
   • DSource context data is hidden in the destination incident, and an unhide action must be completed manually.

   Show answer

   Answer: C

   Next question

2. Question 62 · 62 in bank

   Which alert source has the capability to automatically map fields to the Cortex Data Model (XDM)?

   • AXDR agent
   • BBehavioral indicator of compromise (BIOC)
   • CIndicator of compromise (IOC)
   • DCorrelation rule

   Show answer

   Answer: D

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

XSIAM-Engineer practice, question 61. 62 questions available.