Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

Account hijacking attempts

—Detect potential account hijacking attempts discovered by identifying unusual login activities.

These can happen if there are concurrent login attempts made in short duration from two different

geographic locations, which is

impossible time travel

, or login from a previously unknown browser, operating system, or location.

Excessive login failures

—Detect potential account hijacking attempts discovered by identifying brute force login attempts.

Excessive login failure attempts are evaluated dynamically based on the models observed with

continuous learning.

Unusual user activity

—Discover insider threat and an account compromise using advanced data science. The Prisma

Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of

access keys based on the location and the type of cloud resources.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloudpolicies/anomaly-policies.html