Palo_Alto_Networks
XSIAM-ANALYST · Question #12
What is the cause when alerts generated by a correlation rule are not creating an incident?
Sign in or unlock XSIAM-ANALYST to reveal the answer and full explanation for question #12. The question stem and answer options stay visible for context.
Alert Management and Correlation
Question
What is the cause when alerts generated by a correlation rule are not creating an incident?
Options
- AThe rule does not have a drill-down query configured.
- BThe rule is configured with alert severity below Medium.
- CThe rule has alert suppression enabled.
- DThe rule is using the preconfigured Cortex XSIAM alert field mapping.
Unlock XSIAM-ANALYST to see the answer
You've previewed enough free XSIAM-ANALYST questions. Unlock XSIAM-ANALYST for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#correlation rules#incident creation#alert severity#alert suppression