Cloud Workload Protection

Which Prisma Cloud component is responsible for gathering runtime data and enforcing policies on a Kubernetes node?

Where can you view the 'Vulnerability Explorer' in the Prisma Cloud Console?

You are auditing a container image and find that a vulnerability is marked as 'Fixed' in a specific package version, but your scan still shows it. What is the most likely cause?

You are deploying Prisma Cloud Compute to protect a Kubernetes cluster. You need to ensure that process monitoring is active for all new containers. Where should you configure this in the Prisma Cloud Console?

When configuring a Runtime Policy for serverless, which of the following is a capability that you can enforce?

A customer is seeing 'App Firewall' alerts in Prisma Cloud for their serverless functions. Which configuration step is required to enable WAAS for AWS Lambda?

You are using Prisma Cloud to protect a Fargate deployment. Which deployment strategy must you use to ensure full visibility into the container runtime?

You need to reduce false positives in your Prisma Cloud vulnerability scan results for your Jenkins CI pipeline. Which approach should you take?

What is the primary function of the 'Admission Control' policy in Prisma Cloud Compute?

In Prisma Cloud, what does the 'Host Activity' feature under Runtime protection track?

You notice that your Prisma Cloud Console is not receiving updates for new CVEs. What should you check first?

Which Prisma Cloud feature allows you to block suspicious file execution within a container based on behavior?

What is the benefit of the 'Drift Detection' feature in Prisma Cloud Compute?

You need to automate vulnerability scanning for images stored in an external registry. Which component should you deploy to perform the scan without manual intervention?

When a 'Vulnerability' policy is set to 'Block' in the build phase, what action does the Prisma Cloud CI plugin take?

Where do you manage global compliance settings for your containerized environments?

You have a requirement to audit every command executed by users inside a container shell. Which policy should you configure?

Which type of scanning should be enabled to detect vulnerabilities in the host OS of a Kubernetes node?

When configuring a WAAS policy for a web application, what is the 'App Firewall' feature designed to detect?

You are observing high memory usage by the Prisma Cloud Defender on your nodes. What is the best troubleshooting step?

Which file format can be used to export a compliance report from Prisma Cloud?

Which TWO of the following are valid methods for deploying the Prisma Cloud Compute Defender?

You want to restrict the network access of a container to only communicate with a specific database. How do you implement this in Prisma Cloud?

Which TWO actions can be taken automatically by Prisma Cloud when a high-severity vulnerability is detected in an image?

Which THREE items are captured by the Prisma Cloud Compute Defender for container security?

What is the effect of enabling 'Block' mode in a Runtime Policy without first performing a learning phase?

Which THREE platforms are supported for Prisma Cloud Compute runtime protection?

Which TWO types of scans can be performed by the Prisma Cloud Compute Registry scanner?

Which THREE features are provided by the Prisma Cloud Compute WAAS module?

Which TWO configuration areas in the Prisma Cloud Console are used to manage vulnerability policies?

Which THREE components are involved in the Prisma Cloud serverless security workflow?

Which TWO factors contribute to the 'Risk Score' of a container in Prisma Cloud?

Which THREE options are available under the 'Monitor' menu in Prisma Cloud?