PCCSE · Question #230
Which policy type provides information about connections from suspicious IPs in a customer database?
The correct answer is A. Anomaly. Prisma Cloud's Anomaly policies use behavioral analytics and machine learning to detect unusual or suspicious activity, including network connections originating from known malicious or suspicious IP addresses to resources like databases. Anomaly policies go beyond static rule ma
Question
Which policy type provides information about connections from suspicious IPs in a customer database?
Options
- AAnomaly
- BThreat detection
- CNetwork
- DAutoFocus
How the community answered
(38 responses)- A92% (35)
- C5% (2)
- D3% (1)
Explanation
Prisma Cloud's Anomaly policies use behavioral analytics and machine learning to detect unusual or suspicious activity, including network connections originating from known malicious or suspicious IP addresses to resources like databases. Anomaly policies go beyond static rule matching - they establish baselines and alert on deviations. Option C (Network policies) focuses on traffic flow patterns and port exposure but does not specifically correlate against suspicious IP threat intelligence. Option B (Threat detection) is not a standard standalone Prisma Cloud policy type. Option D (AutoFocus) is a separate Palo Alto Networks threat intelligence platform, not a Prisma Cloud policy type.
Topics
Community Discussion
No community discussion yet for this question.