Logging Monitoring And Compliance

When configuring log streaming to an S3 bucket, which permission must be granted to the Prisma Cloud service principal?

A security auditor requests a report on all instances where a Security Group was modified in AWS within the last 30 days. Which Prisma Cloud feature provides this historical insight?

You are troubleshooting why CloudTrail logs are not appearing in your Prisma Cloud environment. Which component must be validated first?

You are seeing an influx of false-positive alerts for 'Excessive IAM Permission' in your production environment. How can you tune this without disabling the policy globally?

Which dashboard view should a compliance officer use to track the overall posture against CIS Benchmarks across multiple cloud accounts?

You need to ensure that all Prisma Cloud platform audit logs are retained for compliance purposes. Where do you configure the export of these logs to an external SIEM?

You need to audit who accessed a specific S3 bucket last week. Which RQL query structure is most appropriate?

What is the primary difference between a 'Policy' and an 'Alert Rule' in Prisma Cloud?

Where do you view all triggered violations in the Prisma Cloud console?

To ensure audit logs are not tampered with, what is the best practice for storage?

A compliance framework requires evidence that encryption at rest is enabled for all RDS instances. Which Prisma Cloud report provides this 'point-in-time' validation?

You want to automate the remediation of public S3 buckets. Which Prisma Cloud feature enables this?

When integrating Prisma Cloud with Jira for incident tracking, what is the required configuration step?

A Linux host is reporting an alert for an unauthorized process. You need to see the process tree. Which tab in the Console provides this data?

Your organization requires that all alert notifications be sent in JSON format to a specific endpoint. Where is this format controlled?

Which Prisma Cloud feature allows you to view the current state of your cloud environment compared to a baseline?

When a 'Compute' alert is generated, what is the significance of the 'Defender' scope?

What is the function of the 'Suppression' period in an Alert Rule?

When auditing network security, which log type should you review to see all blocked connection attempts?

You need to export a report of all users who have 'Admin' access across all AWS accounts. Which RQL query helps identify this?

You are auditing a Kubernetes environment. Where can you find the audit logs for API server activity?

To monitor for unusual login attempts, which policy type should be enabled?

Which Prisma Cloud tool allows you to perform an ad-hoc search across all your logs for a specific IP address?

Which THREE criteria are commonly used to filter the Alerts view to reduce alert fatigue?

Which TWO of the following are primary methods for ingesting logs into the Prisma Cloud platform?

Which THREE items should be included in an audit-ready compliance report?

Which TWO actions can be taken automatically when a policy violation is detected in Prisma Cloud?

A security requirement states that all cloud resources must be tagged with an 'Owner' attribute. How can you automate this compliance check?

Which THREE components are required for a proper Cloud Audit log strategy?

Which TWO sources of data are critical for cloud security monitoring?

Which THREE actions should be taken if a critical compliance violation is detected?

Which TWO types of data visibility does the Prisma Cloud Defender provide?

Which THREE features assist in managing the 'Compliance' lifecycle?