Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformHard
A security engineer is observing a sudden surge in policy violations related to unencrypted storage buckets across multiple cloud providers in Prisma Cloud. This indicates a potential widespread misconfiguration or a new, unapproved template being used. To understand the scope and impact, the engineer needs to quickly identify the specific cloud accounts and regions most affected, and determine if this trend is new or recurring. Which analytical view within Prisma Cloud is best suited to provide this aggregated, historical trend data?
- AResource Explorer
- BCompliance Explorer
- CPolicy Violation Trends
- DAlerts Dashboard
Show answer & explanationAnswer & explanation
Correct answer: C. Policy Violation Trends
Policy Violation Trends provides a historical and aggregated view of policy violations over time, allowing the engineer to identify which policies, accounts, regions, or resource types are experiencing the most violations and to see if the current surge is a new or recurring pattern.
Why the other options are wrong
- A. Resource Explorer allows detailed inspection of individual cloud resources but is not designed for aggregated historical trend analysis of policy violations across the environment.
- B. Compliance Explorer focuses on compliance posture against benchmarks, not necessarily the historical trends of specific policy violations or surges.
- D. The Alerts Dashboard shows active alerts but doesn't provide the aggregated historical trend analysis across accounts and regions needed to understand a surge.
Prisma Cloud Policy Violation Trends
An analytical feature in Prisma Cloud that visualizes the historical patterns, distribution, and frequency of policy violations across cloud environments, helping identify recurring issues or sudden surges.
- Provides aggregated historical data.
- Helps identify top violating policies, accounts, and regions.
- Useful for understanding root causes and measuring improvement.
Memory trick: To see the 'wave' of violations, look at the 'trends' over time.