A customer finds that an open alert from the previous day has been resolved No auto- remediation was configured. Which two reasons explain this change in alert status? (Choose two )

Question

Options

• Aalert was sent to an external integration
• Bresource was deleted.
• Cuser manually changed the alert status
• Dpolicy was changed.

• A
  15% (3)
• B
  80% (16)
• C
  5% (1)

Explanation

In Prisma Cloud, alerts can automatically resolve (without auto-remediation) for two key reasons: (B) The monitored resource was deleted - if the cloud resource that triggered the alert no longer exists, Prisma Cloud marks the alert as resolved because the violation no longer applies. (D) The policy was changed or disabled - if the policy that generated the alert is modified (e.g., criteria changed so the resource no longer violates it) or disabled entirely, existing open alerts against that policy are auto-resolved. Option A (sent to external integration) is a notification action and does not change alert status. Option C (user manually changed status) is possible but the question implies an automatic resolution, pointing to B and D as the standard system-driven reasons.

No community discussion yet for this question.