A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)
A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)
A customer finding that an open alert from the previous day has been resolved can be explained by two main reasons: a change in the policy or deletion of the resource. If a policy was changed, it might result in the alert no longer being applicable to the specific resource, thus resolving the alert. Additionally, if the resource associated with the alert was deleted, the alert would be resolved as it no longer exists in the system. These two scenarios are probable causes for the change in alert status when no auto-remediation was configured.
Answer is B and C.
users cannot manually set an alert as remediated, they can only dismiss or snooze it.
Correct Answer is B and C, https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004OQ2CAM
correct anser should be A & C. based on the reference provided. No external services listed in the reference list.
*resolved
Yes, Band are correct options. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons
Tricky Question. I think B and C. RESOURCE_DELETED Resource was deleted. USER_DISMISSED Alert was dismissed or snoozed by the Prisma Cloud administrator with role of System admin, Account Group Admin, or Account and Cloud Provisioning Admin. POLICY_UPDATED Policy was updated. This status indicates a change in the policy RQL that results in a resource not being in scope for the policy evaluation.
https://docs.prismacloud.io/en/classic/cspm-admin-guide/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons
The two reasons that could explain the change in alert status are: A. User manually changed the alert status. Even without auto-remediation configured, a user with the appropriate permissions can manually change the status of an alert. C. Resource was deleted. If the resource related to the alert was deleted, the alert would be resolved because the issue no longer exists.