NSE 7 - Security Operations 7.6 Architect Materials - Question #64 Discussion

You suspect your organization has been a victim of numerous incidents carried out by the same threat actor. Which option allows you to group the incidents and track them? (Choose one answer)

• A. Add a common tag to correlate them.
• B. Mark one incident as the parent and run a playbook to close the child incidents.
• C. Select those incidents and use the Merge function.
• D. Create a campaign and link related records to it.

Brave-Dump Community Votes