Question 73
Main Page
What’s the purpose of the classification phase in event management?
A. Remove duplicates
B. Assign severity based on threat impact
C. Archive old logs
D. Identify user mistakes
Answer: Assign severity based on threat impact
Classification assigns priority and type to events, aiding incident triage and response.