Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Security Posture Management (CSPM)Medium
A security operations team is investigating a series of unusual activities across their Azure subscriptions. They need to quickly identify all resources (VMs, databases, storage accounts) associated with a specific tag 'project-alpha-critical' and review their configurations, network interfaces, and attached security groups. Which Prisma Cloud feature allows for this comprehensive, detailed exploration of specific resources?
- ACloud Security Governance
- BAttack Path Analysis
- CResource Explorer
- DAsset Inventory
Show answer & explanationAnswer & explanation
Correct answer: C. Resource Explorer
Resource Explorer is designed for deep dives into individual cloud resources. It allows users to query for specific resources (e.g., by tag) and then view all their associated configurations, relationships, and metadata in a single, detailed view.
Why the other options are wrong
- A. Cloud Security Governance is a broader concept, not a specific feature for exploring individual resource details.
- B. Attack Path Analysis focuses on potential attack vectors, not comprehensive details of individual resources and their configurations.
- D. Asset Inventory provides a list of resources but typically offers less granular detail and interactive exploration of relationships than Resource Explorer.
Prisma Cloud Resource Explorer
A Prisma Cloud feature that provides a detailed, interactive view of individual cloud resources, their configurations, and relationships.
- Enables deep inspection of specific resources.
- Shows configuration details, network interfaces, security groups, etc.
- Supports querying by various attributes like tags.
Memory trick: Resource Explorer is your magnifying glass for cloud assets.