Free PAN-SOP Web TestEngine Demo

Q17 Single choice

Two alerts are waiting for triage. One is a critical-severity detection with low confidence on a noncritical lab host. The other is a high-severity detection with high confidence of active compromise on a payment server. Which alert should receive the higher operational priority?

A
The critical-severity alert, because severity alone determines response order
B
The critical-severity alert, because low confidence requires the fastest containment
C
The high-severity alert, because confidence, active threat context, and asset criticality increase urgency
D
The high-severity alert, because operational priority must always be the opposite of detection severity

PAN-SOP Web TestEngine demo