Prisma Cloud Configuration And Posture Management

You have a policy that is currently generating too many alerts. How do you refine it without deleting it?

What is the purpose of 'Trusted IP' lists in Prisma Cloud?

Which of these are valid reasons to use an Alert Rule in Prisma Cloud? (Choose THREE)

Which type of alert severity should be prioritized for immediate remediation?

Which services are monitored by Prisma Cloud CSPM? (Choose TWO)

Which Prisma Cloud menu is used to view the overall risk posture of your multi-cloud environment using graphical widgets?

When onboarding a new AWS account to Prisma Cloud, what is the primary role of the Cross-Account IAM Role?

When creating an alert rule, what is the purpose of the 'Alert Notifications' section?

To prevent unauthorized access to the Prisma Cloud console, which authentication method should be enforced?

Which of the following are key features of Prisma Cloud's compliance module? (Choose THREE)

You are a cloud security engineer at a retail company that operates a large AWS environment. Your manager asks you to configure Prisma Cloud to automatically detect any S3 bucket that is made publicly accessible via a bucket ACL. You need to create a custom RQL policy that will generate an alert for this condition. Which RQL query should you use?

You need to investigate a specific network connection that occurred between two cloud resources. Which RQL query is most effective?

Which of the following cloud providers are natively supported by Prisma Cloud CSPM? (Choose TWO)

Which attribute can be used to filter resources in an RQL query?

A security team wants to receive an email notification whenever a Prisma Cloud policy that checks for publicly accessible Amazon RDS snapshots is violated. The team already has an alert rule configured for all policies. What should the team do to scope notifications only to this specific policy?

You want to automate the remediation of an S3 bucket that is public. Which Prisma Cloud feature supports this?

Why might a policy not trigger an alert even if a resource is non-compliant?

When auditing cloud events, which data source does Prisma Cloud rely on?

A security engineer needs to onboard a new AWS account into Prisma Cloud and ensure that the account is automatically associated with an existing cloud account group named 'Production'. The engineer has already created a cloud account group with the appropriate naming convention. Which action should the engineer take to achieve this?

A cloud security engineer is configuring a Prisma Cloud alert rule to send notifications to a Slack channel when any user with the 'AdministratorAccess' policy in AWS creates a new IAM user. Which configuration should the engineer use?

Which of the following are supported methods for exporting data from Prisma Cloud? (Choose TWO)

A security engineer needs Prisma Cloud to flag any Amazon S3 bucket in a production AWS account that has been made public via an ACL, but the same engineer wants to allow buckets that are public through a bucket policy only for static website hosting that was approved by change management. Which approach best meets this requirement?

A security engineer must ensure that all new Amazon S3 buckets created in a production AWS account are automatically monitored by Prisma Cloud for public access misconfigurations. The account is already onboarded. Which Prisma Cloud feature should the engineer configure to achieve this?

How are Prisma Cloud policies categorized to help with compliance reporting?

Which of the following is a benefit of using Prisma Cloud for multi-cloud environments?

What is the function of the 'Prisma Cloud Defender' in a CSPM-only deployment?

Which of the following are valid components of a Prisma Cloud alert rule? (Choose TWO)

A security administrator needs to ensure that all AWS S3 buckets are encrypted at rest. Where should they navigate in the Prisma Cloud console to create a policy to enforce this requirement?

A security analyst is reviewing the Prisma Cloud console and wants to quickly identify all cloud resources that are non-compliant with the CIS AWS Foundations Benchmark. Which Prisma Cloud feature should the analyst use?

A security team is using Prisma Cloud to monitor an Azure environment. They want to receive alerts when a network security group (NSG) rule allows inbound traffic from any source to any destination on port 3389 (RDP). The team wants to create a custom policy that triggers an alert only when such a rule exists and is attached to a production virtual network. Which Prisma Cloud feature should they use to limit the policy to production virtual networks?

When creating an RQL query, which elements are essential? (Choose THREE)

What information is visible in the Prisma Cloud Alert details? (Choose THREE)

You are troubleshooting a missing cloud resource in Prisma Cloud. What is the first step to verify if the account is correctly ingested?

Which of the following are valid actions when configuring an alert rule? (Choose TWO)

What criteria can be used to filter policies in the Prisma Cloud UI? (Choose THREE)

A security administrator is configuring Prisma Cloud to monitor a Google Cloud Platform (GCP) environment. The administrator needs to ensure that Prisma Cloud can assess the configuration of GCP resources such as Cloud Storage buckets and Compute Engine instances. Which onboarding method should the administrator use to grant Prisma Cloud read-only access to the GCP organization?

What is the main goal of the 'Investigate' page in Prisma Cloud?

A cloud security analyst needs to identify all Azure virtual machines that have a public IP address and are not protected by a network security group. The analyst will write a Prisma Cloud RQL query. Which approach correctly uses RQL to return only the relevant VMs?

A security administrator is configuring a compliance standard in Prisma Cloud to assess an Azure environment against CIS benchmarks. The administrator needs to customize the standard to exclude certain requirements that are not applicable to their organization. Which two actions are required to create and apply a custom compliance standard in Prisma Cloud? (Choose two.)