Which intensity setting for anomaly alerts is used for the measurement of 100 events over 30 days?

The correct answer is C. Medium. Prisma Cloud anomaly detection uses intensity thresholds to determine how sensitive alerts should be. The 'Medium' intensity setting (C) corresponds to a baseline measurement of approximately 100 events observed over a 30-day training period. Lower intensity (Low) requires fewer

Prisma Cloud Platform

Question

Options

AVery High
BHigh
CMedium
DLow

How the community answered

(24 responses)

A
8% (2)
B
4% (1)
C
88% (21)

Explanation

Prisma Cloud anomaly detection uses intensity thresholds to determine how sensitive alerts should be. The 'Medium' intensity setting (C) corresponds to a baseline measurement of approximately 100 events observed over a 30-day training period. Lower intensity (Low) requires fewer events to trigger, making it more sensitive, while Higher intensities (High, Very High) require significantly more observed events before the baseline is established, reducing false positives. Medium represents a balanced threshold suitable for most production environments.

Topics

#Anomaly detection#Alert intensity#Event thresholds#Prisma Cloud alerts

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice