Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Cisco 300-445 Exam - Topic 1 Question 2 Discussion

A CPU utilization alert for Endpoint Agents is triggering too frequently, creating alert noise. Which of the following steps would help reduce the sensitivity of the alert rule? (Select two)
A) Increase the number of agents that must exceed the CPU threshold to trigger the alert and C) Adjust the alert rule to require more rounds of data to exceed the threshold
B) Lower the CPU utilization percentage in the alert condition
D) Enable the alert rule on more Endpoint Agents

Cisco 300-445 Exam - Topic 1 Question 2 Discussion

Actual exam question for Cisco's 300-445 exam
Question #: 2
Topic #: 1
[All 300-445 Questions]

A CPU utilization alert for Endpoint Agents is triggering too frequently, creating alert noise. Which of the following steps would help reduce the sensitivity of the alert rule? (Select two)

Show Suggested Answer Hide Answer
Suggested Answer: A, C

Alert fatigue is a major operational challenge in network assurance. To make a CPU utilization alert for Endpoint Agents less sensitive and reduce 'noise,' an engineer must implement statistical filters that ignore transient spikes or isolated events.

The two most effective methods are:

Increase the agent count (Option A): By requiring a higher number or percentage of agents to simultaneously exceed the threshold, the system ensures the alert represents a widespread environmental issue rather than a single user running a CPU-intensive background process.

Require more rounds of data (Option C): Instead of alerting on a single measurement (1 of 1 round), the engineer can configure the rule to require the threshold to be breached for multiple consecutive checks (e.g., 2 of 3 rounds). This filters out brief, non-impactful CPU spikes that occur naturally during OS updates or browser startups.

Other options would have the opposite effect:

Option B: Lowering the percentage threshold (e.g., from 90% to 50%) would cause the alert to trigger much more frequently, increasing noise.

Option D: Enabling the alert on more agents increases the pool of potential triggers, which typically leads to more notifications unless the logic in Option A is also applied.


Contribute your Thoughts:

0/2000 characters
Macy
2 months ago
I feel B would just increase alerts. A and C are safer choices.
upvoted 0 times
...
Dorothy
2 months ago
C makes sense too. More data rounds give better accuracy.
upvoted 0 times
...
Jaclyn
2 months ago
Agreed! A helps filter out false positives.
upvoted 0 times
...
Shaunna
2 months ago
I think A and C are the best options. Less noise is crucial.
upvoted 0 times
...
Erasmo
4 months ago
What if we just tweak the existing thresholds instead of adding more agents?
upvoted 0 times
...
Leatha
4 months ago
Definitely A and C, that should help with the noise.
upvoted 0 times
...
Corinne
4 months ago
Surprised that enabling more agents (D) is even an option here.
upvoted 0 times
...
Allene
4 months ago
I disagree, lowering the CPU threshold (B) could just make it worse!
upvoted 0 times
...
Jani
5 months ago
A and C seem like solid choices.
upvoted 0 times
...
Sharee
5 months ago
Increase the agents and lower the threshold? What is this, amateur hour? A and C, all the way.
upvoted 0 times
...
Tonja
5 months ago
Haha, I bet the person who wrote this question was just trying to confuse us. A and C are the clear winners.
upvoted 0 times
...
Matthew
5 months ago
B and D? Nah, that's just gonna make the problem worse. A and C are the real solutions.
upvoted 0 times
...
Isaiah
5 months ago
Definitely A and C. Lowering the threshold is just asking for trouble.
upvoted 0 times
...
Lura
5 months ago
A and C are the way to go. Gotta reduce that alert noise, am I right?
upvoted 0 times
...
Paola
6 months ago
I’m not sure about enabling the alert on more agents. That sounds like it could create even more noise instead of reducing it.
upvoted 0 times
...
Dorsey
6 months ago
Lowering the CPU utilization percentage seems counterintuitive; I feel like that would just make the alerts trigger even more.
upvoted 0 times
...
Glory
7 months ago
I remember a similar question where adjusting the alert conditions helped reduce false positives. Maybe requiring more rounds of data is the way to go?
upvoted 0 times
...
Weldon
7 months ago
I think increasing the number of agents that need to exceed the threshold could help, but I'm not entirely sure if that’s the best option.
upvoted 0 times
...
Angella
7 months ago
I think a combination of increasing the agent threshold and requiring more rounds of data would be the way to go. That should help cut down on the noise without losing the value of the alert.
upvoted 0 times
...
Elise
7 months ago
Enabling the alert rule on more Endpoint Agents? I'm not sure that would actually reduce the sensitivity - that might just create more alerts to sort through.
upvoted 0 times
...
Kenneth
7 months ago
Adjusting the alert rule to require more rounds of data to exceed the threshold seems like a smart strategy to me. That could help filter out some of the false positives.
upvoted 0 times
...
Noah
7 months ago
Hmm, I'm not sure if lowering the CPU utilization percentage is the best approach. That might just make the alert less useful overall.
upvoted 0 times
...
Brittni
8 months ago
I think increasing the number of agents that must exceed the CPU threshold would be a good way to reduce the sensitivity and alert noise.
upvoted 0 times
Howard
1 month ago
More rounds of data could help too!
upvoted 0 times
...
Nicolette
1 month ago
Lowering the CPU percentage seems risky.
upvoted 0 times
...
India
2 months ago
I agree, increasing the number of agents is smart.
upvoted 0 times
...
...

Save Cancel