What is the outcome of creating and implementing an alert exclusion?
What is the outcome of creating and implementing an alert exclusion?
Creating and implementing an alert exclusion in Cortex XDR ensures that the Cortex XDR agent will not create an alert for this specific event in the future. This means that the agent will recognize the conditions set in the alert exclusion and bypass alerting for those conditions going forward.
"Alert Exclusion rules specify match criteria for alerts that you want to suppress."
B is correct, refer to the official document:https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Exception-Configuration