View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam


NSE 7 - Security Operations 7.6 Architect Materials-Question 13 Discussion
Comment Image Comment Image Comment Image

You are investigating an open incident and want to add records from the Tickets module, a custom module, to the visual correlation widget. Assume there are already linked ticket records to the incident. How do you accomplish this? (Choose one answer)

  • A. Ingest ticket records through a custom connector.
  • B. Tag ticket records with the incident ID.
  • C. Edit the incident template and add the Tickets module to the graph.
  • D. Define more module relationships under Correlation Settings.
Correct Answer: D

Brave-Dump Clients Votes

C 50%
D 50%

Comments



Anonymous User 2026-03-07 17:38:19

Selected Answers: C


https://docs.fortinet.com/document/fortisoar/7.6.3/user-guide/207087/working-with-modules-alerts-incidents

Anonymous User 2026-06-29 18:07:34

Selected Answers: D


its D

https://docs.fortinet.com/document/fortisoar/7.6.5/user-guide/584725/configuring-picklists-and-visual-correlation-settings

C is close but mistakes the mechanism. The detail-view template is where you place the Visual Correlation widget itself, but which modules render inside it (especially a custom one) is governed by Correlation Settings, not by adding a module to a template "graph."