View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam

NSE 7 - Security Operations 7.6 Architect Materials - Question #13 Discussion

Comment Image Comment Image Comment Image
Question Diagram

You are investigating an open incident and want to add records from the Tickets module, a custom module, to the visual correlation widget. Assume there are already linked ticket records to the incident. How do you accomplish this? (Choose one answer)

  • A. Ingest ticket records through a custom connector.
  • B. Tag ticket records with the incident ID.
  • C. Edit the incident template and add the Tickets module to the graph.
  • D. Define more module relationships under Correlation Settings.
Correct Answer: D

Brave-Dump Community Votes

Answer: C (1 vote) 50%
Answer: D (1 vote) 50%

Community Explanations & Comments (2)

Anonymous User 7 months ago
Selected: C
https://docs.fortinet.com/document/fortisoar/7.6.3/user-guide/207087/working-with-modules-alerts-incidents
Anonymous User 4 months ago
Selected: D
its D

https://docs.fortinet.com/document/fortisoar/7.6.5/user-guide/584725/configuring-picklists-and-visual-correlation-settings

C is close but mistakes the mechanism. The detail-view template is where you place the Visual Correlation widget itself, but which modules render inside it (especially a custom one) is governed by Correlation Settings, not by adding a module to a template "graph."