Which two behaviors occur while an incident is closed? (Choose two.)
Select an option, then click Submit answer.
Reference / correct answer:
Playbook is marked as complete.
Most accepted answer: A. Playbook is marked as complete.
Community votes: A=1, B=1
Selected Answer: AB A. Playbook is marked as complete. ✔️ When an incident is closed, any active playbook linked to it is automatically marked as completed. B. Commands cannot be executed in the War Room. ✔️ Once the incident is closed, the War Room becomes read-only — no new commands or actions can be executed. Incorrect options: C. Timers can no longer run. ❌ Timers stop but are not deleted; their final state is recorded. D. Running timers are in a paused state. ❌ Timers are stopped, not paused, because the incident is considered finalized. upvoted 3 times