Which triggered symptom sets the criticality when creating an alert definition that has multiple symptoms?

Question

Options

• AThe first critical symptom
• BThe most critical symptom
• CThe average critical symptom
• DThe least critical symptom

• A
  4% (1)
• B
  93% (25)
• D
  4% (1)

Explanation

When an alert definition contains multiple symptoms with different severity levels, the most critical triggered symptom determines the overall alert criticality. This makes operational sense: if any single symptom in a group reaches a critical threshold, the alert should reflect that worst-case condition to ensure operators respond appropriately.

Why the distractors are wrong:

• A (First critical symptom): Criticality isn't determined by evaluation order - the system doesn't stop assessing once it finds the first critical symptom; it evaluates all triggered symptoms.
• C (Average critical symptom): Averaging severities would mask genuine critical conditions. A mix of "info" and "critical" symptoms should never average down to "warning."
• D (Least critical symptom): Using the minimum would dangerously underreport severity, causing operators to miss urgent issues.

Memory tip: Think of it like a medical triage rule - "treat the worst condition, not the average one." If a patient has a broken finger and a heart attack, you respond to the heart attack. The most severe symptom always wins.

No community discussion yet for this question.