Prisma Cloud Configuration And Posture Management

When creating an alert rule, what is the purpose of the 'Alert Notifications' section?

A security administrator needs to ensure that all AWS S3 buckets are encrypted at rest. Where should they navigate in the Prisma Cloud console to create a policy to enforce this requirement?

Which Prisma Cloud menu is used to view the overall risk posture of your multi-cloud environment using graphical widgets?

You are troubleshooting a missing cloud resource in Prisma Cloud. What is the first step to verify if the account is correctly ingested?

How are Prisma Cloud policies categorized to help with compliance reporting?

You need to investigate a specific network connection that occurred between two cloud resources. Which RQL query is most effective?

To prevent unauthorized access to the Prisma Cloud console, which authentication method should be enforced?

What is the function of the 'Prisma Cloud Defender' in a CSPM-only deployment?

You want to automate the remediation of an S3 bucket that is public. Which Prisma Cloud feature supports this?

Which of the following is a benefit of using Prisma Cloud for multi-cloud environments?

What is the main goal of the 'Investigate' page in Prisma Cloud?

Which type of alert severity should be prioritized for immediate remediation?

Which attribute can be used to filter resources in an RQL query?

When onboarding a new AWS account to Prisma Cloud, what is the primary role of the Cross-Account IAM Role?

What is the purpose of 'Trusted IP' lists in Prisma Cloud?

Why might a policy not trigger an alert even if a resource is non-compliant?

When auditing cloud events, which data source does Prisma Cloud rely on?

Which of the following cloud providers are natively supported by Prisma Cloud CSPM? (Choose TWO)

You have a policy that is currently generating too many alerts. How do you refine it without deleting it?

Which of the following are valid components of a Prisma Cloud alert rule? (Choose TWO)

Which of the following are valid actions when configuring an alert rule? (Choose TWO)

What criteria can be used to filter policies in the Prisma Cloud UI? (Choose THREE)

When creating an RQL query, which elements are essential? (Choose THREE)

Which of the following are key features of Prisma Cloud's compliance module? (Choose THREE)

Which services are monitored by Prisma Cloud CSPM? (Choose TWO)

Which of the following are supported methods for exporting data from Prisma Cloud? (Choose TWO)

What information is visible in the Prisma Cloud Alert details? (Choose THREE)

Which of these are valid reasons to use an Alert Rule in Prisma Cloud? (Choose THREE)

A security engineer needs Prisma Cloud to flag any Amazon S3 bucket in a production AWS account that has been made public via an ACL, but the same engineer wants to allow buckets that are public through a bucket policy only for static website hosting that was approved by change management. Which approach best meets this requirement?

A security engineer needs to onboard a new AWS account into Prisma Cloud and ensure that the account is automatically associated with an existing cloud account group named 'Production'. The engineer has already created a cloud account group with the appropriate naming convention. Which action should the engineer take to achieve this?

A security engineer must ensure that all new Amazon S3 buckets created in a production AWS account are automatically monitored by Prisma Cloud for public access misconfigurations. The account is already onboarded. Which Prisma Cloud feature should the engineer configure to achieve this?

You are a cloud security engineer at a retail company that operates a large AWS environment. Your manager asks you to configure Prisma Cloud to automatically detect any S3 bucket that is made publicly accessible via a bucket ACL. You need to create a custom RQL policy that will generate an alert for this condition. Which RQL query should you use?

A cloud security engineer is configuring a Prisma Cloud alert rule to send notifications to a Slack channel when any user with the 'AdministratorAccess' policy in AWS creates a new IAM user. Which configuration should the engineer use?

A cloud security analyst needs to identify all Azure virtual machines that have a public IP address and are not protected by a network security group. The analyst will write a Prisma Cloud RQL query. Which approach correctly uses RQL to return only the relevant VMs?

A security analyst is reviewing the Prisma Cloud console and wants to quickly identify all cloud resources that are non-compliant with the CIS AWS Foundations Benchmark. Which Prisma Cloud feature should the analyst use?

A security team wants to receive an email notification whenever a Prisma Cloud policy that checks for publicly accessible Amazon RDS snapshots is violated. The team already has an alert rule configured for all policies. What should the team do to scope notifications only to this specific policy?

A security administrator is configuring a compliance standard in Prisma Cloud to assess an Azure environment against CIS benchmarks. The administrator needs to customize the standard to exclude certain requirements that are not applicable to their organization. Which two actions are required to create and apply a custom compliance standard in Prisma Cloud? (Choose two.)

A security administrator is configuring Prisma Cloud to monitor a Google Cloud Platform (GCP) environment. The administrator needs to ensure that Prisma Cloud can assess the configuration of GCP resources such as Cloud Storage buckets and Compute Engine instances. Which onboarding method should the administrator use to grant Prisma Cloud read-only access to the GCP organization?

A security team is using Prisma Cloud to monitor an Azure environment. They want to receive alerts when a network security group (NSG) rule allows inbound traffic from any source to any destination on port 3389 (RDP). The team wants to create a custom policy that triggers an alert only when such a rule exists and is attached to a production virtual network. Which Prisma Cloud feature should they use to limit the policy to production virtual networks?