What are the three states of the Container Runtime Model? (Choose three.)

The Prisma Cloud Container Runtime Model operates in three distinct states. It begins in the 'Learning' state, where it observes the container's normal behavior, including processes, network connections, and file system access, to build a behavioral profile. Once this period is complete, the model transitions to the 'Active' state, where it enforces the learned profile and generates alerts for any deviations. Finally, models that are no longer in use can be moved to the 'Archived' state for historical reference and analysis.

A. Initiating: This is not a formal state in the Prisma Cloud runtime model lifecycle. The process starts directly with 'Learning'.
D. Running: While a container has a 'running' state, the behavioral model associated with it does not use this term. The model's state is 'Learning' or 'Active' while the container runs.

1. Palo Alto Networks, "Prisma Cloud Compute Administrator's Guide", Runtime defense for containers. The documentation describes the model lifecycle: "When a model is first created, it’s in the learning state... After the learning period completes, the model becomes active... Models can also be archived."