What are the two types of Alert Rules that can be defined?

Alert Rules can come from Zscaler's ThreatLabZ predefined detections or from customer-defined logic. This lets organizations combine vendor threat intelligence with tenant-specific alerting requirements. Option A (ThreatLabZ pre-defined and customer defined) is correct because the two alert-rule types are ThreatLabZ predefined and customer defined.

Why the other options are incorrect:

B. Snort defined and 3rd party defined: A third-party PageRisk feed would be externally sourced reputation; the Zscaler answer is its own multi-data web-page algorithm.

C. ThreatLabZ pre-defined and 3rd party defined: A third-party PageRisk feed would be externally sourced reputation; the Zscaler answer is its own multi-data web-page algorithm.

D. Customer defined and 3rd party defined: A third-party PageRisk feed would be externally sourced reputation; the Zscaler answer is its own multi-data web-page algorithm.