Which alerts are fixed by enablement of automated remediation?

Question

Options

• AAll applicable open alerts regardless of when they were generated, with alert status updated to
• BOnly the open alerts that were generated before the enablement of remediation, with alert status
• CAll applicable open alerts regardless of when they were generated, with alert status updated to
• DOnly the open alerts that were generated after the enablement of remediation, with alert status

• A
  91% (20)
• B
  5% (1)
• C
  5% (1)

Explanation

When automated remediation is enabled on a policy in Prisma Cloud, the platform immediately acts on all currently open alerts that match the policy-not just future ones. The remediation script runs against each violating resource, and upon successful remediation the alert status is updated to 'Resolved.' This retroactive behavior ensures there is no gap where pre-existing violations remain unaddressed simply because remediation was not enabled at the time the alert was first generated.

No community discussion yet for this question.