Yes, your understanding is correct. The same is illustrated in the same document Interpreting Dynamic Threshold charts which has details on how the threshold are set and the alerts are fired and resolved.
Hope this helps clarify your query.
Please 'Accept as answer' if it helped, so that it can help others in the community looking for help on similar topics.