A customer wants to be notified about port scanning network activities in their environment. Which policy type detects this behavior?

The correct answer is B. Anomaly. In Prisma Cloud, Anomaly policies are designed to detect unusual or suspicious network behaviors, including reconnaissance activities such as port scanning, unusual data exfiltration patterns, and other traffic anomalies. Anomaly detection uses machine learning and behavioral bas

Cloud Network Security

Question

Options

ANetwork
BAnomaly
CConfig
DPort Scan

How the community answered

(22 responses)

A
5% (1)
B
95% (21)

Explanation

In Prisma Cloud, Anomaly policies are designed to detect unusual or suspicious network behaviors, including reconnaissance activities such as port scanning, unusual data exfiltration patterns, and other traffic anomalies. Anomaly detection uses machine learning and behavioral baselines to flag deviations. Option A (Network policies) controls allowed/blocked traffic flows but does not perform behavioral anomaly detection. Option C (Config policies) checks for resource misconfigurations. Option D (Port Scan) is not a real Prisma Cloud policy type - port scanning detection falls under Anomaly policies.

Topics

#Anomaly Detection#Network Security Policies#Port Scanning

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice