Match each automatic remediation to the correct PTA security event.

Add To Pending: Unmanaged privileged account

Rotate Credentials: Suspected credential theft

Reconcile Credentials: Suspicious password change

Comprehensive Explanation: In CyberArk’s Privileged Threat Analytics (PTA), automatic remediations are actions that can be configured to respond to specific security events. For the event of an unmanaged privileged account, the remediation “Add To Pending” is used to add the account to the pending accounts queue. When there is a suspected credential theft, “Rotate Credentials” is the remediation that initiates a password change. Lastly, for a suspicious password change event, “Reconcile Credentials” is the remediation that ensures the credentials are correct and valid1.

References:

CyberArk Docs: Configure security events