Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformHard
A security engineer is analyzing a high volume of historical compliance scan results in Prisma Cloud for a specific cloud account. They need to quickly identify all instances where a particular policy (e.g., 'S3 bucket should not be publicly accessible') was violated over the past three months and track the remediation status of these violations. Which Prisma Cloud feature is best suited for this detailed historical analysis and tracking?
- APolicy Violation Trends report.
- BAsset Explorer with historical view.
- CCompliance Dashboard.
- DAlerts page.
Show answer & explanationAnswer & explanation
Correct answer: A. Policy Violation Trends report.
The Policy Violation Trends report in Prisma Cloud is specifically designed for historical analysis of policy violations, showing how compliance posture changes over time, including the count of violations, their severity, and often their remediation status, making it ideal for tracking specific policy violations over a period.
Why the other options are wrong
- B. Asset Explorer shows the current or past state of individual assets, but not aggregated trends of policy violations across an account for a specific policy.
- C. The Compliance Dashboard provides an overview of current compliance posture, not detailed historical trends for a specific policy.
- D. The Alerts page shows individual alerts, which can be numerous, but doesn't aggregate and trend specific policy violations over time for analysis.
Prisma Cloud Policy Violation Trends
A reporting feature in Prisma Cloud that provides a historical view of policy violations, showing changes in compliance posture, violation counts, and remediation progress over a specified time period.
- Tracks policy violations over time for specific policies or groups.
- Essential for demonstrating compliance improvement or identifying degradation.
- Helps in understanding the effectiveness of remediation efforts.
Memory trick: To see how policy violations change, follow the trends report's historical range.