The Cloud Discovery feature in Prisma Cloud allows engineers to monitor accounts continuously and report on cloud-native services that are unprotected across different cloud service providers. This feature requires specific permissions to access and assess the cloud environment's configuration and security posture. Thus, the correct answer is D: It enables engineers to continuously monitor all accounts and report on the services that are unprotected. https://docs.prismacloud.io/en/classic/compute-admin-guide/cloud-service-providers/cloud-accounts-discovery-p
PCCSE Exam Question 57
A customer does not want alerts to be generated from network traffic that originates from trusted internal networks. Which setting should you use to meet this customer's request?
Correct Answer: C
B --> Anomaly Trusted List-Exclude trusted IP addresses when conducting tests for PCI compliance or penetration testing on your network. Any addresses included in this list do not generate alerts against the Prisma Cloud Anomaly Policies that detect unusual network activity such as the policies that detect internal port scan and port sweep activity, which are enabled by default. C --> Trusted Alert IP Addresses-If you have internal networks that connect to your public cloud infrastructure, you can add these IP address ranges (or CIDR blocks) as trusted ... Prisma Cloud default network policies that look for internet exposed instances also do not generate alerts when the source IP address is included in the trusted IP address list and the account hijacking anomaly policy filters out activities from known IP addresses. Also, when you use RQL to query network traffic, you can filter out traffic from known networks that are included in the trusted IP address list. For a customer who does not want alerts to be generated from network traffic originating from trusted internal networks, the appropriate setting is C. Trusted Alert IP Addresses. This setting allows for specifying certain IP addresses as trusted, meaning alerts will not be triggered by activities from these IPs, ensuring that internal network traffic is not flagged as potentially malicious.
PCCSE Exam Question 58
Which of the following is displayed in the asset inventory?
Correct Answer: A
The asset inventory in cloud security platforms like Prisma Cloud typically displays a wide range of cloud resources, including EC2 instances. EC2 instances are virtual servers in Amazon's Elastic Compute Cloud (EC2) for running applications on the Amazon Web Services (AWS) infrastructure. The asset inventory provides visibility into these instances, allowing security teams to monitor their configuration, security posture, and compliance status. This visibility is crucial for identifying misconfigurations, vulnerabilities, and ensuring that all EC2 instances adhere to the organization's security policies and compliance requirements. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-dashboards/asset-inve
PCCSE Exam Question 59
On which cloud service providers can you receive new API release information for Prisma Cloud?
Correct Answer: B
Prisma Cloud, developed by Palo Alto Networks, is known for its comprehensive cloud security capabilities across various cloud service providers (CSPs). The integration and support extend to major CSPs, including AWS (Amazon Web Services), Azure (Microsoft's Cloud), GCP (Google Cloud Platform), Oracle Cloud, and Alibaba Cloud. This wide range of support ensures that organizations leveraging multi-cloud environments can maintain consistent security postures across all their cloud assets. The information regarding supported CSPs by Prisma Cloud can typically be found in their official documentation and release notes, which detail the features, integrations, and enhancements specific to each CSP.
PCCSE Exam Question 60
Taking which action will automatically enable all severity levels?
Correct Answer: D
In Prisma Cloud, to automatically enable all severity levels for alerts, a user would need to navigate to the Policies section, then to Settings. Within this area, there is an option for "auto-enable default policies," which, when checked for all severity levels, ensures that any default policies related to those severities are automatically activated. This is a configuration setting that streamlines the alerting process by ensuring that all relevant severity levels are covered by the default policies without the need for manual intervention. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/manage-prism Step 1- To enable global settings for Prisma Cloud default policies click "Settings" and select "Enterprise Settings" Step 2- To enable policies based on severity, select Auto enable new default policies of the type-Critical, High, Medium, Low or Informational.