Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Security Posture Management (CSPM)Medium
A security engineer receives an alert from Prisma Cloud about an 'Unrestricted Egress to Internet' policy on a security group associated with a critical database server. The engineer needs to quickly understand the potential impact by visualizing which other resources could be affected by this misconfiguration, including any inbound paths that might exploit it. Which Prisma Cloud feature is BEST suited for this task?
- ACompliance Policies Dashboard
- BResource Explorer
- CAlert Management Dashboard
- DNetwork Explorer
Show answer & explanationAnswer & explanation
Correct answer: D. Network Explorer
Network Explorer provides a visual representation of network connectivity and potential attack paths within the cloud environment. It allows engineers to trace inbound and outbound traffic flows, identify risky connections, and understand the blast radius of network misconfigurations, making it ideal for visualizing the impact of unrestricted egress.
Why the other options are wrong
- A. Compliance Policies Dashboard provides an overview of policy adherence, not a network visualization tool.
- B. Resource Explorer is for querying resource attributes, not for visualizing network paths or attack surfaces.
- C. Alert Management Dashboard is for viewing and managing alerts, not for detailed network visualization.
Prisma Cloud Network Explorer
A Prisma Cloud feature that graphically maps network topology, identifies connectivity risks, and visualizes potential attack paths within cloud environments.
- Provides a visual representation of network connections.
- Helps identify potential attack vectors and blast radius.
- Supports tracing both inbound and outbound network flows.
Memory trick: To explore the network's danger, map the connections and find the attacker's path.