Which three anomaly policies are predefined in Prisma Cloud?

Which three anomaly policies are predefined in Prisma Cloud?

• A. Unusual user activity, Excessive login failures, Suspicious file activity
• B. Excessive login failures, Account hijacking attempts, Denial-of-service activity
• C. Unusual user activity, Excessive login failures, Account hijacking attempts
• D. Account hijacking attempts, Suspicious file activity, Denial-of-service activity

Answer: (C)

The correct answer highlights three anomaly policies that are essential for monitoring and mitigating potential security threats within Prisma Cloud. Unusual user activity is a critical anomaly policy because it helps identify atypical behavior from users that could indicate compromised accounts or insider threats. Such deviations from normal usage patterns prompt security teams to investigate potential security incidents. Excessive login failures serve as another vital indicator. This policy flags instances where there are repeated failed attempts to access an account, which can point to brute force attacks or unauthorized access attempts. By detecting this early, organizations can take preventive measures to protect their resources. Account hijacking attempts are also a significant focus in the Prisma Cloud anomaly policies. Monitoring for signs of account hijacking ensures that any unusual access patterns leading to unauthorized usage of user accounts are identified and addressed promptly. These policies work together to create a robust security posture by ensuring that various angles of potential security threats are monitored, allowing organizations to respond promptly to incidents before they escalate.

The correct answer highlights three anomaly policies that are essential for monitoring and mitigating potential security threats within Prisma Cloud.

Unusual user activity is a critical anomaly policy because it helps identify atypical behavior from users that could indicate compromised accounts or insider threats. Such deviations from normal usage patterns prompt security teams to investigate potential security incidents.

Excessive login failures serve as another vital indicator. This policy flags instances where there are repeated failed attempts to access an account, which can point to brute force attacks or unauthorized access attempts. By detecting this early, organizations can take preventive measures to protect their resources.

Account hijacking attempts are also a significant focus in the Prisma Cloud anomaly policies. Monitoring for signs of account hijacking ensures that any unusual access patterns leading to unauthorized usage of user accounts are identified and addressed promptly.

These policies work together to create a robust security posture by ensuring that various angles of potential security threats are monitored, allowing organizations to respond promptly to incidents before they escalate.