Cloud Security Posture Management

A cloud security engineer is configuring a Prisma Cloud CSPM alert rule to notify the security team when any S3 bucket in a production AWS account becomes publicly accessible. The engineer wants to ensure that only buckets tagged `Environment: prod` trigger the alert, and that the notification is sent to an Amazon SNS topic. Which configuration should the engineer use?

An administrator needs to quickly view the overall security posture and compliance status of multiple AWS accounts connected to Prisma Cloud. Which Prisma Cloud tab provides this aggregate high-level executive dashboard?

Which TWO methods can administrators use to search or filter assets in the Prisma Cloud Asset Inventory? (Choose two.)

A security analyst is investigating a high-severity alert in Prisma Cloud about an S3 bucket that is publicly accessible. The analyst wants to quickly gather contextual details about the bucket, such as its tags, creation date, and associated cloud account, without leaving the Prisma Cloud console. Which feature should the analyst use?

A cloud security engineer is configuring a custom policy in Prisma Cloud to detect Azure Storage Accounts that allow public blob access. The engineer wants to ensure the policy evaluates the correct attribute. Which of the following RQL queries correctly identifies Azure Storage Accounts with public blob access enabled?

How does Prisma Cloud connect to enterprise cloud environments (AWS, Azure, GCP) for CSPM scanning?

A security administrator is creating a new custom policy in Prisma Cloud CSPM to detect Amazon EC2 instances that have a specific tag missing. The administrator wants to ensure the policy is properly evaluated and can be used in alert rules. Which TWO components are required when defining a custom policy in Prisma Cloud CSPM? (Choose two.)

What is the primary benefit of using Prisma Cloud's out-of-the-box (OOTB) policies?

An administrator needs to ensure that Prisma Cloud policy evaluations run against newly created cloud resources immediately upon deployment. How does Prisma Cloud handle real-time policy evaluation for cloud configurations?

An administrator in Prisma Cloud wants to identify and remediate overly permissive AWS IAM policies that allow full administrative access. Which Prisma Cloud CSPM feature should the administrator use to automatically generate a least-privilege policy based on actual cloud trail usage?

Which THREE data sources can Prisma Cloud CSPM ingest and analyze to evaluate security posture and compliance? (Choose three)

When onboarding a new multi-account AWS environment into Prisma Cloud CSPM via CloudFormation, what is the primary purpose of deploying the StackSet template?

Which TWO actions can an administrator perform when configuring Alert Rules in Prisma Cloud? (Choose two.)

What role do Prisma Cloud Account Groups play in organizing security posture management?

When onboarding a new Google Cloud Platform (GCP) organization into Prisma Cloud, what is the primary prerequisite required to grant Prisma Cloud visibility across all projects?

Which Prisma Cloud feature allows security teams to group cloud resources based on business units, environments (e.g., Production vs. Development), or ownership for targeted policy enforcement?

Where in Prisma Cloud can an administrator create, modify, or disable OOTB (Out-of-The-Box) and custom security policies?

An organization requires that all compute instances across AWS and Azure be tagged with an 'Owner' and 'Environment' tag. How can Prisma Cloud enforce or report on missing tags?

Which THREE actions occur when a Prisma Cloud policy is flagged as a violation (generating an alert)? (Choose three.)

When creating a custom RQL query in Prisma Cloud, which THREE parameters or clauses are commonly utilized in a configuration resource query (`config from cloud.resource`)? (Choose three.)

An administrator wants to suppress low-priority Prisma Cloud CSPM alerts for specific development resources so they do not clutter the dashboard. What is the recommended best practice to achieve this?

When configuring an Alert Rule in Prisma Cloud CSPM, which THREE notification channels or integration types are natively supported out-of-the-box? (Choose three)

An organization wants to use Prisma Cloud to ensure that no Kubernetes clusters running in Google Kubernetes Engine (GKE) have legacy ABAC (Attribute-Based Access Control) enabled. Which RQL query accomplishes this?

You need to detect if any Azure storage accounts have public blob access enabled across your enterprise subscription. Which RQL query accurately identifies this misconfiguration?

A security team wants to ensure that all newly created cloud resources in their AWS environment are automatically evaluated against Prisma Cloud policies within minutes of creation. Which Prisma Cloud component is responsible for this near-real-time evaluation?

An administrator needs to restrict access to Prisma Cloud so that junior security analysts can only view alerts and assets belonging to the 'PCI-Scope' AWS account, and nothing else. How should this be achieved?

What is the primary purpose of creating an Alert Rule in Prisma Cloud?

What is the function of Prisma Cloud's Trusted Advisor or cloud provider native recommendations integration within CSPM?

An organization wants to enforce an automated remediation workflow in Prisma Cloud for AWS Security Groups that allow unrestricted ingress on port 22 (SSH). How should the administrator configure this integration?

An enterprise environment uses Prisma Cloud Data Security posture management to scan for sensitive data in cloud storage. Which capability does Prisma Cloud Data Security provide?

Your security team requires that any high-severity misconfiguration alert generated in Prisma Cloud must immediately notify the SecOps team via a Slack channel. Which feature should you configure?

An organization requires that any security alert generated by Prisma Cloud CSPM for production S3 buckets with public access must automatically trigger an AWS Lambda function to remediate the public ACLs. Which mechanism should be configured in Prisma Cloud?

What is the purpose of the Asset Inventory module in Prisma Cloud?

A security engineer is investigating why a Prisma Cloud CSPM alert for an unencrypted Amazon RDS instance was not generated, even though the RDS instance lacks encryption and the policy is enabled. The engineer discovers that the RDS instance is tagged with `Environment: dev`, and the policy's alert rule has a tag-based filter that only includes resources tagged `Environment: prod`. What is the most likely reason the alert was not generated?

Which TWO of the following capabilities are native functions of Prisma Cloud CSPM? (Choose two)

Which TWO methods can an administrator use to view or export compliance posture data in Prisma Cloud? (Choose two.)

Your organization operates in a heavily regulated industry and requires that all Prisma Cloud audit logs and alert history be retained indefinitely and exported to an external SIEM. How should you configure log retention and forwarding?

Which TWO actions can be taken on an alert within the Prisma Cloud Alerts tab? (Choose two.)

When configuring network flow RQL (`network from vpc.flow`), which THREE attributes or fields can be evaluated in the query? (Choose three.)

An auditor asks for evidence of how long security alerts remain active before being resolved in your multi-cloud environment. Where can an administrator find metrics and trending data regarding alert lifecycles and resolution times?

When onboarding an AWS environment into Prisma Cloud for CSPM, which TWO components or permissions are typically required to establish the integration? (Choose two.)

Which Prisma Cloud feature allows developers to scan Infrastructure as Code (IaC) templates such as Terraform and CloudFormation before deployment?

When configuring an integration with a third-party ticketing system like Jira in Prisma Cloud, which THREE components must typically be provided or configured? (Choose three.)

Your compliance team requires proof that Prisma Cloud is actively scanning your cloud environments and generating alerts. Where can an administrator review audit trails of administrative actions taken inside the Prisma Cloud console itself?

Which TWO cloud security posture domains or features are core pillars of Prisma Cloud CSPM? (Choose two.)

Your company acquired another firm that uses a separate AWS account structure. You need to onboard their AWS Organization into your existing Prisma Cloud tenant while keeping their alerts segregated from your primary business unit. How should you structure this?

When creating a custom compliance standard in Prisma Cloud CSPM, what are the primary building blocks required to map your internal policies to the framework?

Which TWO platforms or cloud providers are natively supported for posture management and account onboarding within Prisma Cloud CSPM? (Choose two.)

A security analyst is reviewing Prisma Cloud CSPM findings and notices that a policy for 'AWS IAM password policy should require at least one uppercase letter' is failing for an account. The analyst wants to understand the exact configuration of the password policy. Where in Prisma Cloud can the analyst view the raw configuration data of the AWS account's password policy?

Which TWO practices are recommended when establishing Role-Based Access Control (RBAC) in Prisma Cloud? (Choose two.)

An enterprise security architect wants to create a custom compliance standard in Prisma Cloud that combines controls from both CIS and NIST SP 800-53. How can this be accomplished?

Which TWO settings or features are configurable under Prisma Cloud Settings > Access Control? (Choose two.)