Cybersecurity-Apprentice Cloud Security Practice Question
An enterprise security architect is reviewing Prisma Cloud integration options for securing cloud-native applications throughout their lifecycle. Which THREE activities are supported by Prisma Cloud Application Security (IaC Security)? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Scanning Terraform, AWS CloudFormation, and Kubernetes YAML templates for misconfigurations
Prisma Cloud Application Security scans infrastructure as code templates, open source dependencies, and CI/CD pipelines to find vulnerabilities before deployment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Scanning Terraform, AWS CloudFormation, and Kubernetes YAML templates for misconfigurations
Why this is correct
IaC scanning analyzes configuration templates in repositories prior to deployment.
- ✗
Performing active real-time DDoS mitigation on public BGP routing tables
Why it's wrong here
DDoS mitigation is handled by network-level scrubbing services like AWS Shield.
- ✓
Scanning open source package dependencies (SCA) for known vulnerabilities in IDEs and repositories
Why this is correct
Software Composition Analysis (SCA) identifies vulnerable dependencies in application code repositories.
- ✓
Detecting hardcoded secrets, API keys, and passwords embedded in source code repositories
Why this is correct
Secret scanning identifies exposed credentials in code files.
- ✗
Enforcing hardware token multi-factor authentication for corporate VPN users
Why it's wrong here
MFA for VPN users is managed by IAM and Prisma Access / GlobalProtect.
About these practice questions
Courseiva writes every Cybersecurity-Apprentice question from scratch — 177 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This Cybersecurity-Apprentice practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Cybersecurity-Apprentice exam.