Broadcom-VMware
5V0-91.20 · Question #51
An analyst is investigating a specific alert in Endpoint Standard. The analyst sees the investigate button from the alert triage page and sees the following: [IMAGE CONTENT] Which statement…
The correct answer is D. Each event listed contributed to the overall alert score and severity. See the full explanation below for the reasoning.
Question
An analyst is investigating a specific alert in Endpoint Standard. The analyst sees the investigate button from the alert triage page and sees the following:
[IMAGE CONTENT]
Which statement accurately characterizes this situation?
Options
- AThese events are tied to an observed alert within the user interface.
- BThe policy had no blocking and isolation rules set.
- CThe events shown will all have the same event ID, correlating them to the alert.
- DEach event listed contributed to the overall alert score and severity.
How the community answered
(34 responses)- A3% (1)
- B18% (6)
- C6% (2)
- D74% (25)
Community Discussion
No community discussion yet for this question.