Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam PCCSE topic 1 question 8 discussion

Actual exam question from Palo Alto Networks's PCCSE
Question #: 8
Topic #: 1
[All PCCSE Questions]

A security team notices a number of anomalies under Monitor > Events. The incident response team works with the developers to determine that these anomalies are false positives.
What will be the effect if the security team chooses to Relearn on this image?

  • A. The model is deleted, and Defender will relearn for 24 hours.
  • B. The anomalies detected will automatically be added to the model.
  • C. The model is deleted and returns to the initial learning state.
  • D. The model is retained, and any new behavior observed during the new learning period will be added to the existing model.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Reference:
https://digitalguardian.com/blog/five-steps-incident-response

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
[Removed]
Highly Voted 2 years, 7 months ago
Correct is D. https://docs.prismacloudcompute.com/docs/compute_edition_21_04/runtime_defense/runtime_defense_containers.html#learning-mode
upvoted 7 times
...
df1
Highly Voted 2 years, 6 months ago
According to the reference, I think correct answer is D.
upvoted 5 times
...
Spippolo
Most Recent 10 months, 2 weeks ago
Selected Answer: D
Extend Learning: You can relearn an existing model by clicking the Extend Learning button in the Actions menu. This is an additive process, so any existing static and behavioral modeling remain in place. Manual Learning: You can manually alter the duration of learning at any time by starting and stopping the Manual Learning option in the Actions menu. This should be done with discretion because the model may or may not complete within the time-period due to manual interruption. There is no time limit for manual learning. It depends on the user’s selection.
upvoted 1 times
...
kumar_57
1 year ago
The correct option is D. Relearn: You can relearn an existing model by clicking the Relearn button in the Actions menu. This is an additive process, so any existing static and behavioral modeling remain in place.
upvoted 1 times
...
TheIronSheik
1 year, 1 month ago
Another study guide I'm looking at has this same question and their answer is A. just wanted to share.
upvoted 1 times
...
vaisat
1 year, 5 months ago
I would say C. D is for “Extend learning” option. The keyword in this question is “relearn” hence answer C.
upvoted 1 times
vaisat
1 year, 5 months ago
DISREGARD my above message ^^^ D is correct.
upvoted 1 times
...
...
Ravi221
1 year, 6 months ago
Correct answer is D, https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/runtime_defense_containers
upvoted 2 times
...
ssukum
1 year, 7 months ago
Correct answer is D
upvoted 1 times
...
j1518
1 year, 7 months ago
Selected Answer: D
Correct answer is D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...