Exam PCSAE All QuestionsBrowse all questions from this exam
Question 106

Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)

    Correct Answer: A, C

    Inside the Incidents table view, running commands for incidents with Active status is a common action, as it ensures only relevant events are processed. Also, exporting incidents and managing their status are typical functionalities, but not as complete as Run Command in terms of status specificity. Thus, the ability to perform actions like Run Command for active incidents and export incidents as JSON or change their status are two clear functionalities inside the Incidents table view. Other options like Assign, Edit, and Mark as Duplicate, while useful, do not necessarily apply to incidents regardless of their status, and closing and deleting incidents is often subject to status constraints.

Discussion
heromanxxxOptions: AB

AB is correct https://docs.fortinet.com/document/fortindr-cloud/2024.2.0/cortex-xsoar-integration-guide/46051/viewing-incidents-in-cortex-xsoar

piipoOptions: CD

CD is correct

ZDMA99

This is not correct. Export only provides a csv. It's AB.