How should an administrator resolve this issue?

An incorrectly constructed watchlist generates 10,000 incorrect alerts.

How should an administrator resolve this issue?
A . Delete the watchlist to automatically clear the alerts, and then create a new watchlist with the correct criteria.
B . From the Triage Alerts Page, use the facets to select the watchlist, click the Wrench button to “Mark all as Resolved False Positive”, and then update the watchlist with the correct criteria.
C . Update the Triage Alerts Page to show 200 alerts, click the Select All Checkbox, click the “Dismiss Alert(s)” button for each page, and then update the watchlist with the correct criteria.
D . From the Watchlists Page, select the offending watchlist, click “Clear Alerts” from the Action menu, and then update the watchlist with the correct criteria.

Answer: B

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments