Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Security Posture Management (CSPM)Medium
A security auditor is performing a compliance audit using Prisma Cloud. They need to verify that all cloud accounts are properly onboarded and that Prisma Cloud has the necessary permissions to collect configuration data from all regions and services within those accounts. Which aspect of cloud account onboarding is the auditor primarily focused on?
- AEnsuring the correct access type and permissions for comprehensive data ingestion.
- BSetting up alert notifications for security incidents.
- CDefining custom policies for specific organizational requirements.
- DConfiguring automated remediation actions for policy violations.
Show answer & explanationAnswer & explanation
Correct answer: A. Ensuring the correct access type and permissions for comprehensive data ingestion.
During cloud account onboarding, ensuring the correct access type (e.g., read-only IAM role for AWS/Azure/GCP) and sufficient permissions is crucial for Prisma Cloud to successfully ingest all necessary configuration data across regions and services, which is what an auditor would verify for comprehensive monitoring.
Why the other options are wrong
- B. Alert notifications are a consequence of monitoring, which depends on successful data ingestion, not the primary onboarding access itself.
- C. Custom policies are defined after data ingestion is established, not as part of the initial onboarding access.
- D. Automated remediation is a post-onboarding capability, not the primary focus of ensuring initial data collection.
Prisma Cloud Account Access Type
The method and level of permissions granted to Prisma Cloud to access and ingest configuration data from a cloud environment during onboarding.
- Crucial for comprehensive data collection.
- Typically uses read-only IAM roles/service principals.
- Determines visibility across regions and services.
Memory trick: Access type is the key to Prisma Cloud's view.