Exam XSIAM-Analyst Topic 1 Question 61 Discussion

The correct answer isD, a risk scoring policy for the critical asset.
In Cortex XSIAM, to consistently apply a high score (e.g., 100) to any alert involving a particular asset, analysts should define and apply a risk scoring policy. Such policies allow organizations to specifically customize and enforce a scoring framework to reflect the critical nature of certain assets, ensuring they are always prioritized during incident response activities.
* Asset criticality alone (option A) doesn't automatically assign a static high score to every alert.
* SmartScore (option B) is AI-driven and dynamic; it cannot guarantee a fixed, always-maximized score.
* User scoring rules (option C) target user entities, not specifically the assets themselves.
"Risk scoring policies are explicitly defined to consistently assign specific scores to incidents or alerts involving critical assets, ensuring prioritized visibility in the incident queue."