Multiple Choice
An administrator is asked to configure an "Nslookup" adaptive response action, so that it appears as a selectable option in the notable event's action menu when an analyst is working in the Incident Review dashboard. What steps would the administrator take to configure this option?
A) Configure -> Content Management -> Type: Correlation Search -> Notable -> Nslookup
B) Configure -> Type: Correlation Search -> Notable -> Recommended Actions -> Nslookup
C) Configure -> Content Management -> Type: Correlation Search -> Notable -> Next Steps -> Nslookup
D) Configure -> Content Management -> Type: Correlation Search -> Notable -> Recommended Actions -> Nslookup
Correct Answer:
Verified
Correct Answer:
Verified
Q62: Which of the following threat intelligence types
Q63: The Remote Access panel within the User
Q64: Which of the following is a recommended
Q65: What is the maximum recommended volume of
Q66: Who can delete an investigation?<br>A) ess_admin users
Q67: Which component normalizes events?<br>A) SA-CIM.<br>B) SA-Notable.<br>C) ES
Q68: What is the first step when preparing
Q69: When creating custom correlation searches, what format
Q70: How is it possible to navigate to
Q72: Where is the Add-On Builder available from?<br>A)