Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformEasy
A security engineer is setting up a new Prisma Cloud Enterprise deployment. They need to ensure that all cloud accounts onboarded into Prisma Cloud are automatically scanned for compliance against a specific set of industry standards as soon as they are connected. Which Prisma Cloud feature should be configured to achieve this automation?
- ACustom Policies
- BDefault Policy Groups
- CAlert Rules
- DResource Lists
Show answer & explanationAnswer & explanation
Correct answer: B. Default Policy Groups
Default Policy Groups automatically apply a predefined set of policies to all new cloud accounts onboarded to Prisma Cloud, ensuring immediate compliance scanning without manual intervention.
Why the other options are wrong
- A. Custom Policies define specific compliance checks, but still need to be assigned to accounts or groups, which Default Policy Groups can automate.
- C. Alert Rules define actions to take when policies are violated, but do not automatically apply policies to new accounts.
- D. Resource Lists are used to group specific cloud resources for policy targeting, not for automatic policy application to new accounts.
Prisma Cloud Default Policy Groups
A feature in Prisma Cloud that allows administrators to automatically apply a predefined set of policies to all newly onboarded cloud accounts.
- Ensures immediate compliance scanning for new accounts.
- Reduces manual configuration for account onboarding.
- Can be customized to include specific industry standards.
Memory trick: New accounts get a 'default' welcome package of policies.