Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Security Posture Management (CSPM)Easy
A security engineer is tasked with integrating a new cloud environment (e.g., an Azure subscription) into Prisma Cloud. The primary objective is to gain visibility into all deployed resources and their configurations to assess compliance posture. What is the initial and fundamental step in this process?
- ACreating custom RQL policies for specific compliance checks.
- BGenerating compliance reports for existing industry benchmarks.
- CConfiguring automated remediation actions for common misconfigurations.
- DOnboarding the cloud account by providing necessary access permissions.
Show answer & explanationAnswer & explanation
Correct answer: D. Onboarding the cloud account by providing necessary access permissions.
The initial and fundamental step to gain any visibility or assess compliance posture in Prisma Cloud is to onboard the cloud account. This involves granting Prisma Cloud the necessary access permissions (e.g., via an Azure Service Principal or AWS IAM Role) to discover and collect data about resources.
Why the other options are wrong
- A. Custom policies are created *after* the account is onboarded and data is being collected.
- B. Compliance reports are generated *from* collected data, which requires a successfully onboarded account.
- C. Automated remediation is configured *after* policies identify misconfigurations, which requires onboarding first.
Cloud Account Onboarding
The foundational process of connecting a cloud environment to Prisma Cloud, granting it necessary permissions to discover and collect data about cloud resources.
- First step for any CSPM activity.
- Involves granting read-only access.
- Enables resource discovery and data collection.
Memory trick: Onboarding is step one to open the cloud's door.