Your company wants to know if there has been any unusual user activity. In the UI, you go to Skope IT -> Alerts. Which two types of alerts would you…

To identify unusual user activity, an administrator should filter for alerts generated by Netskope's User and Entity Behavior Analytics (UEBA) engine. The UEBA engine establishes a baseline of normal behavior for each user and then flags deviations. In the Skope IT > Alerts interface, these deviations are categorized under two primary alert types: anomaly and uba. The anomaly type specifically flags activities that deviate from a user's established behavioral baseline, while uba is the broader category for alerts generated by the behavior analytics engine. Filtering by these two types directly surfaces potential insider threats, compromised accounts, or other unusual user actions.

C. Alert type = malware: This filter shows alerts related to detected threats like viruses or ransomware, which is a function of threat protection, not user behavior analytics.

D. Alert type = policy: This filter shows violations of explicitly configured real-time policies (e.g., blocking an upload), not necessarily unusual or anomalous behavior.

1. Netskope Technical Documentation

"About Alerts": In the section describing alert types

the documentation specifies that the anomaly type is for "An activity that deviates from the established baseline for a user." It also defines the uba type as "An alert generated by the User Behavior Analytics engine." This confirms these two types are directly for identifying unusual user activity.

2. Netskope Technical Documentation

"User and Entity Behavior Analytics (UEBA)": The UEBA feature overview explains that the system "detects anomalies in your enterprise cloud usage that could be indicative of a threat." It further clarifies that these detections are presented as alerts

which can be viewed and filtered in Skope IT

directly linking the concept of unusual activity to anomaly and uba alerts.