What happens in Prisma Cloud after Training Model Threshold or Alert Disposition is changed?

Question

Options

• AChanges will take effect after a new learning phase of 30 days.
• BSystem will perform a reboot, deleting all past alerts.
• CExisting alerts and new alerts are regenerated based on the new setting.
• DNew alerts are generated based on the new setting.

• A
  4% (1)
• B
  4% (1)
• C
  93% (25)

Explanation

When you change the Training Model Threshold or Alert Disposition in Prisma Cloud, the system immediately regenerates both existing and new alerts based on the updated setting - making C correct. This means previously triggered alerts are re-evaluated under the new rules, not just future ones.

Why the distractors are wrong:

• A is wrong because no new 30-day learning phase is triggered; the change takes effect immediately by re-processing existing data.
• B is wrong because Prisma Cloud does not reboot or delete past alerts - the system is designed for continuity, not destructive resets.
• D is wrong because it's only half-true: new alerts are generated, but the key distinction is that existing alerts are also regenerated, which D omits.

Memory tip: Think of it as a "retroactive recalculation" - Prisma Cloud doesn't just move forward with the new setting, it looks backward too. The word "existing" in option C is the signal that the answer is comprehensive, not partial.

No community discussion yet for this question.