ExamGecko
Question list
Search
Search

List of questions

Search

Question 130 - PCCSE discussion

Report
Export

Which three elements are part of SSH Events in Host Observations? (Choose three.)

A.
Startup process
Answers
A.
Startup process
B.
User
Answers
B.
User
C.
System calls
Answers
C.
System calls
D.
Process path
Answers
D.
Process path
E.
Command
Answers
E.
Command
Suggested answer: B, D, E

Explanation:

SSH Events in Host Observations within Prisma Cloud focus on activities related to Secure Shell (SSH) usage, which is critical for secure communication and remote management of cloud resources. The elements that are part of SSH Events include the User involved in the SSH session, the Process path that indicates the executable or command invoked during the session, and the Command itself that was executed. These elements are crucial for security monitoring and forensic analysis as they provide detailed context about SSH activities, helping security teams to identify unauthorized access, potential breaches, or malicious activities within their cloud environments. Startup process and System calls, while important in other contexts, are not directly associated with SSH Events in Host Observations.

asked 23/09/2024
Arun kumar
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first