Which three elements are part of SSH Events in Host Observations? (Choose three.)

The correct answer is B. User D. Process path E. Command. In Prisma Cloud's Host Observations feature, SSH Events capture telemetry about SSH sessions established on monitored hosts. The three recorded elements are: User (the account used to authenticate via SSH), Process path (the path of the process invoked during the SSH session)…

Cloud Native Security

Question

Options

AStartup process
BUser
CSystem calls
DProcess path
ECommand

How the community answered

(59 responses)

A
5% (3)
B
93% (55)
C
2% (1)

Explanation

In Prisma Cloud's Host Observations feature, SSH Events capture telemetry about SSH sessions established on monitored hosts. The three recorded elements are: User (the account used to authenticate via SSH), Process path (the path of the process invoked during the SSH session), and Command (the specific commands executed during the session). This combination gives security teams visibility into who logged in, what binary they ran, and what commands were issued. 'Startup process' is associated with process monitoring at boot time, and 'System calls' are tracked in a separate syscall auditing context, not specifically within SSH event records.

Topics

#SSH Events#Host Observations#Workload Security#Event Monitoring

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice