When mapping incoming data to incident fields, which statement is correct?

When mapping incoming data to incident fields, which statement is correct?
A . Data that is not mapped is placed under labels
B . Only text fields are classified
C . Classification cannot be used if mapping is enabled
D . Every incoming field must be mapped

View Answer

Answer: A

Explanation:

Reference: https://xsoar.pan.dev/docs/incidents/incident-classification-mapping