Palo Alto Networks System Engineer – Prisma Cloud — Question 39

Which type of alert captures unusual user activity and excessive login failures?

Answer options

• A. Anomaly
• B. Audit Event
• C. Configuration
• D. Network

Correct answer: A

Explanation

The correct answer is A, Anomaly, as it specifically focuses on detecting unusual activities that deviate from normal patterns, such as excessive login failures. The other options, while relevant to security and monitoring, do not specifically target the detection of abnormal user behavior.