ExamGecko
Question list
Search
Search

List of questions

Search

Question 16 - PCCSE discussion

Report
Export

A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.

Which two reasons explain this change in alert status? (Choose two.)

A.
user manually changed the alert status.
Answers
A.
user manually changed the alert status.
B.
policy was changed.
Answers
B.
policy was changed.
C.
resource was deleted.
Answers
C.
resource was deleted.
D.
alert was sent to an external integration.
Answers
D.
alert was sent to an external integration.
Suggested answer: B, C

Explanation:

RESOURCE_DELETED Resource was deleted. USER_DISMISSED Alert was dismissed or snoozed by the Prisma Cloud administrator with role of System admin, Account Group Admin, or Account and Cloud Provisioning Admin. POLICY_UPDATED Policy was updated. This status indicates a change in the policy RQL that results in a resource not being in scope for the policy evaluation.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004OQ2CAM

asked 23/09/2024
Debaparna Bandyopadhyay
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first