Q8 Monitor Domain 4 · 20–25% of exam Priority · Real Exam

An alert fires repeatedly for the same ongoing incident. Which mechanism suppresses the noise?

  1. A Deleting the alert rule
  2. B An alert processing rule with suppression, or tuning the auto-mitigate and frequency settings (correct answer)
  3. C Reducing retention
  4. D Disabling the action group permanently

Shortcut: Alert processing rules can suppress notifications during maintenance windows or group related alerts, without removing the underlying detection.