Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Security Posture Management (CSPM)Medium
A security operations center (SOC) analyst is investigating a series of unusual activities across their Azure environment. They need to quickly identify all virtual machines (VMs) that have public IP addresses and are running an outdated operating system version. Which Prisma Cloud feature, combined with appropriate filtering, would be most effective for this task?
- ANetwork Explorer
- BResource Explorer
- CAttack Path Analysis
- DAlert Management
Show answer & explanationAnswer & explanation
Correct answer: B. Resource Explorer
The Resource Explorer in Prisma Cloud allows analysts to search, filter, and view details of all cloud resources. It is ideal for identifying specific types of resources (VMs) with particular attributes (public IP, outdated OS) across the entire cloud estate.
Why the other options are wrong
- A. Network Explorer focuses on network connectivity and traffic flows, not detailed resource attributes like OS versions.
- C. Attack Path Analysis identifies potential attack vectors, but doesn't offer a general-purpose resource search and filter capability for specific attributes.
- D. Alert Management is for reviewing existing alerts, not for ad-hoc searching and filtering of resource attributes.
Prisma Cloud Resource Explorer
A centralized interface for searching, filtering, and viewing detailed information about all discovered cloud resources.
- Provides granular resource details.
- Supports powerful RQL-based queries.
- Essential for investigations and audits.
Memory trick: To explore resources, you need a good map and compass.