Where is holistic and summarized real-time data of active threats in a Prisma Access tenant located?

Question

Options

• AMonitor --> Network Activity --> Threats
• BIncidents & Alerts --> Log Viewer --> Firewall/Threat
• CCommand Center --> Operational Health
• DCommand Center --> Threats

• A
  4% (3)
• B
  1% (1)
• C
  3% (2)
• D
  91% (62)

Explanation

Command Center → Threats is correct because the Command Center in Prisma Access is specifically designed as the unified dashboard for holistic, summarized, real-time visibility across your tenant - and the Threats sub-section aggregates active threat data (malware, exploits, C2 activity, etc.) in a single consolidated view.

Why the distractors are wrong:

• A (Monitor → Network Activity → Threats): This path provides granular, log-level traffic data for investigation, not a holistic real-time summary.
• B (Incidents & Alerts → Log Viewer → Firewall/Threat): Log Viewer is for raw log search and analysis - useful for deep dives, but not a summarized threat overview.
• C (Command Center → Operational Health): You're in the right place (Command Center), but Operational Health focuses on service/tunnel health and connectivity status, not threat intelligence.

Memory tip: Think of Command Center as your security operations dashboard - it's the "big picture" view. Within it, Threats is the dedicated pane for what's attacking you, while Operational Health is for how your infrastructure is running. If the question asks for "holistic/summarized/real-time" threat data, always land on Command Center → Threats.

No community discussion yet for this question.