Cloud-Security-Engineer Cloud Security Posture Management Practice Question
An auditor needs to review historical configuration changes of an AWS security group that resulted in a compliance violation three weeks ago. Which Prisma Cloud feature should be used?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Runtime Audit Stream
Prisma Cloud allows users to query historical configurations and audit trails using RQL time-travel capabilities (config timeline / diff).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Runtime Audit Stream
Why this is correct
Runtime audit stream focuses on container and host runtime events, not historical cloud resource configurations.
- ✓
Asset Inventory with historical time-travel RQL
Why this is correct
Config RQL supports time-travel parameters (e.g., as of timestamp) to inspect asset configurations at a specific point in the past.
- ✗
Cloud Network Explorer
Why it's wrong here
Cloud Network Explorer visualizes current network paths and topology, not historical configuration states.
- ✗
Vulnerability Management dashboard
Why it's wrong here
Vulnerability management tracks CVEs in packages and images, not infrastructure configuration changes.
About these practice questions
Courseiva writes every Cloud-Security-Engineer question from scratch — 216 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This Cloud-Security-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Cloud-Security-Engineer exam.