Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Security Posture Management (CSPM)Medium
A security engineer is investigating a series of suspicious network flows originating from an unapproved region in their AWS environment. They need to visualize all network connections, security group rules, and network ACLs associated with these flows to understand potential lateral movement and egress points. Which Prisma Cloud feature is best suited for this comprehensive network visualization and analysis?
- ANetwork Explorer
- BResource Explorer
- CAttack Path Analysis
- DAlert Management
Show answer & explanationAnswer & explanation
Correct answer: A. Network Explorer
The Network Explorer in Prisma Cloud is specifically designed to visualize network topology, connectivity, and traffic flows between cloud resources. It allows security engineers to see how resources are connected, what security rules govern those connections, and identify potential egress or lateral movement paths.
Why the other options are wrong
- B. Resource Explorer focuses on individual resource details and attributes, not network connectivity and rules.
- C. Attack Path Analysis focuses on end-to-end attack vectors to critical assets, not general network visualization.
- D. Alert Management is for handling existing alerts, not for ad-hoc network analysis and visualization.
Prisma Cloud Network Explorer
A visual tool within Prisma Cloud that maps network topology, security controls, and traffic flows across cloud environments.
- Shows inter-resource connectivity.
- Visualizes security group and NACL rules.
- Helps identify potential lateral movement and egress points.
Memory trick: To explore the network, you need a good 'Network Explorer'.