Exam PCCSE All QuestionsBrowse all questions from this exam
Question 11

A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.

Which two reasons explain this change in alert status? (Choose two.)

    Correct Answer: B, C

    A customer finding that an open alert from the previous day has been resolved can be explained by two main reasons: a change in the policy or deletion of the resource. If a policy was changed, it might result in the alert no longer being applicable to the specific resource, thus resolving the alert. Additionally, if the resource associated with the alert was deleted, the alert would be resolved as it no longer exists in the system. These two scenarios are probable causes for the change in alert status when no auto-remediation was configured.

Discussion
SakeBombOptions: BC

Answer is B and C.

Ravi221Options: BC

Correct Answer is B and C, https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004OQ2CAM

SakeBombOptions: BC

users cannot manually set an alert as remediated, they can only dismiss or snooze it.

Mig_MAMOptions: AC

The two reasons that could explain the change in alert status are: A. User manually changed the alert status. Even without auto-remediation configured, a user with the appropriate permissions can manually change the status of an alert. C. Resource was deleted. If the resource related to the alert was deleted, the alert would be resolved because the issue no longer exists.

JohnOrtizOptions: BC

https://docs.prismacloud.io/en/classic/cspm-admin-guide/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons

SpippoloOptions: BC

Tricky Question. I think B and C. RESOURCE_DELETED Resource was deleted. USER_DISMISSED Alert was dismissed or snoozed by the Prisma Cloud administrator with role of System admin, Account Group Admin, or Account and Cloud Provisioning Admin. POLICY_UPDATED Policy was updated. This status indicates a change in the policy RQL that results in a resource not being in scope for the policy evaluation.

kumar_57

Yes, Band are correct options. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons

SakeBomb

*resolved

[Removed]Options: AC

correct anser should be A & C. based on the reference provided. No external services listed in the reference list.