exam questions

Exam PCCSE All Questions

View all questions & answers for the PCCSE exam

Exam PCCSE topic 1 question 11 discussion

Actual exam question from Palo Alto Networks's PCCSE
Question #: 11
Topic #: 1
[All PCCSE Questions]

A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)

  • A. user manually changed the alert status.
  • B. policy was changed.
  • C. resource was deleted.
  • D. alert was sent to an external integration.
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
Reference:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
SakeBomb
Highly Voted 2 years, 11 months ago
Answer is B and C.
upvoted 11 times
...
Mig_MAM
Most Recent 6 months, 1 week ago
The two reasons that could explain the change in alert status are: A. User manually changed the alert status. Even without auto-remediation configured, a user with the appropriate permissions can manually change the status of an alert. C. Resource was deleted. If the resource related to the alert was deleted, the alert would be resolved because the issue no longer exists.
upvoted 2 times
...
JohnOrtiz
7 months, 1 week ago
Selected Answer: BC
https://docs.prismacloud.io/en/classic/cspm-admin-guide/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons
upvoted 1 times
...
Spippolo
1 year, 6 months ago
Selected Answer: BC
Tricky Question. I think B and C. RESOURCE_DELETED Resource was deleted. USER_DISMISSED Alert was dismissed or snoozed by the Prisma Cloud administrator with role of System admin, Account Group Admin, or Account and Cloud Provisioning Admin. POLICY_UPDATED Policy was updated. This status indicates a change in the policy RQL that results in a resource not being in scope for the policy evaluation.
upvoted 1 times
...
kumar_57
1 year, 9 months ago
Yes, Band are correct options. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons
upvoted 1 times
...
Ravi221
2 years, 3 months ago
Correct Answer is B and C, https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004OQ2CAM
upvoted 2 times
...
SakeBomb
2 years, 11 months ago
*resolved
upvoted 1 times
...
SakeBomb
2 years, 11 months ago
users cannot manually set an alert as remediated, they can only dismiss or snooze it.
upvoted 2 times
...
[Removed]
3 years, 3 months ago
correct anser should be A & C. based on the reference provided. No external services listed in the reference list.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago