339 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
An administrator needs to restrict access to the Prisma Cloud administrative console based on corporate IP ranges. Where within the Prisma Cloud platform should the administrator configure trusted IP address restrictions?
Trusted IP restrictions in Prisma Cloud are configured under Administration > Access Control > Trusted IP, where administrators define allowlisted CIDR ranges that are permitted to reach the administrative console. This setting is a platform-level access control, not a per-cloud-…Read full explanation
A security architect is configuring CloudTrail integration for Prisma Cloud across multiple AWS accounts managed through AWS Organizations. Which account deployment method should be used to ensure centralized log ingestion and security posture visibility?
A master (organization) CloudTrail in the AWS Organizations management account aggregates API activity from all member accounts into a single S3 bucket and CloudWatch Logs destination. Prisma Cloud then assumes a cross-account IAM role to read that centralized trail, giving one i…Read full explanation
An auditor requests evidence that public AWS S3 buckets are automatically remediated when discovered by Prisma Cloud. Which feature should the security engineer configure to achieve automated remediation?
Prisma Cloud Auto-Remediation uses cloud-native functions (such as AWS Lambda) or webhooks to automatically respond to policy violations, including remediating public S3 buckets by applying block-public-access settings or modifying bucket ACLs/policies. This is the feature design…Read full explanation
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.