Cloud Workload Protection

Which Prisma Cloud feature allows you to block suspicious file execution within a container based on behavior?

A customer is seeing 'App Firewall' alerts in Prisma Cloud for their serverless functions. Which configuration step is required to enable WAAS for AWS Lambda?

Which TWO factors contribute to the 'Risk Score' of a container in Prisma Cloud?

When configuring a Runtime Policy for serverless, which of the following is a capability that you can enforce?

Which file format can be used to export a compliance report from Prisma Cloud?

Where do you manage global compliance settings for your containerized environments?

Which THREE platforms are supported for Prisma Cloud Compute runtime protection?

You need to reduce false positives in your Prisma Cloud vulnerability scan results for your Jenkins CI pipeline. Which approach should you take?

Which Prisma Cloud component is responsible for gathering runtime data and enforcing policies on a Kubernetes node?

Which THREE items are captured by the Prisma Cloud Compute Defender for container security?

Which THREE components are involved in the Prisma Cloud serverless security workflow?

You are observing high memory usage by the Prisma Cloud Defender on your nodes. What is the best troubleshooting step?

You are deploying Prisma Cloud Compute to protect a Kubernetes cluster. You need to ensure that process monitoring is active for all new containers. Where should you configure this in the Prisma Cloud Console?

You notice that your Prisma Cloud Console is not receiving updates for new CVEs. What should you check first?

Which THREE options are available under the 'Monitor' menu in Prisma Cloud?

Which TWO actions can be taken automatically by Prisma Cloud when a high-severity vulnerability is detected in an image?

Which TWO types of scans can be performed by the Prisma Cloud Compute Registry scanner?

You have a requirement to audit every command executed by users inside a container shell. Which policy should you configure?

What is the benefit of the 'Drift Detection' feature in Prisma Cloud Compute?

You want to restrict the network access of a container to only communicate with a specific database. How do you implement this in Prisma Cloud?

Which TWO of the following are valid methods for deploying the Prisma Cloud Compute Defender?

In Prisma Cloud, what does the 'Host Activity' feature under Runtime protection track?

You need to automate vulnerability scanning for images stored in an external registry. Which component should you deploy to perform the scan without manual intervention?

What is the primary function of the 'Admission Control' policy in Prisma Cloud Compute?

You are auditing a container image and find that a vulnerability is marked as 'Fixed' in a specific package version, but your scan still shows it. What is the most likely cause?

Which THREE features are provided by the Prisma Cloud Compute WAAS module?

When configuring a WAAS policy for a web application, what is the 'App Firewall' feature designed to detect?

Where can you view the 'Vulnerability Explorer' in the Prisma Cloud Console?

When a 'Vulnerability' policy is set to 'Block' in the build phase, what action does the Prisma Cloud CI plugin take?

What is the effect of enabling 'Block' mode in a Runtime Policy without first performing a learning phase?

Which TWO configuration areas in the Prisma Cloud Console are used to manage vulnerability policies?

You are using Prisma Cloud to protect a Fargate deployment. Which deployment strategy must you use to ensure full visibility into the container runtime?

Which type of scanning should be enabled to detect vulnerabilities in the host OS of a Kubernetes node?