Skip to content
CIS-EM
Alerts and Tasks
medium
Question 1 of 60

When do alert correlation rules run?

AOnly during nightly maintenance windows
BOnly when a user manually opens Alert Intelligence
CFor new alerts or alerts changing from closed or flapping to open or reopen
DOnly after an incident is created from the alert

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion