When mapping incoming data to incident fields, which statement is correct?

When mapping incoming data to incident fields, which statement is correct?
A . Data that is not mapped is placed under labels
B. Only text fields are classified
C. Classification cannot be used if mapping is enabled
D. Every incoming field must be mapped

View Answer

Answer: A

Explanation:

Reference: https://xsoar.pan.dev/docs/incidents/incident-classification-mapping