The key requirement here is that the playbook must fire based on a pattern of alert characteristics, not on one fixed alert policy name or ID. Nutanix Intelligent Operations documentation provides a trigger type specifically for this purpose: Alerts Matching Criteria. That trigger lets administrators filter alerts using criteria such as severity, type, title patterns, and similar attributes, which is exactly what is needed when policy identifiers vary across environments but the response logic should stay consistent. It avoids binding the playbook to one alert definition and instead binds it to the alert behavior that matters operationally. ( Nutanix )

A single Alert trigger would be too brittle because it ties the automation to one named alert policy. A Webhook trigger would move the matching logic outside Prism and add unnecessary external dependency when the requirement can already be met natively. An Event trigger is also too broad or mismatched because the question is explicitly about filtering alerts by performance-related characteristics. Nutanix created “Alerts Matching Criteria” to handle precisely this kind of cross-environment, pattern-based automation. Therefore, A is the best answer because it gives the administrator scalable, environment-agnostic remediation logic while still excluding unrelated alerts through filters. ( Nutanix )