Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformHard
A company is using Prisma Cloud to monitor its AWS environment. They have configured a custom compliance policy to detect unencrypted S3 buckets. Due to a recent audit finding, they need to ensure that this specific policy, and only this policy, is evaluated against all S3 buckets in their production AWS accounts every hour, rather than the default scan interval. How can they achieve this without affecting other policies or resources?
- AUtilize the Prisma Cloud API to trigger an on-demand scan for the specific policy against the relevant S3 buckets hourly.
- BConfigure a custom alert rule for the policy to trigger more frequently.
- CModify the global scan interval setting for all compliance policies to one hour.
- DCreate a new policy group specifically for the S3 encryption policy and assign a custom scan schedule to it.
Show answer & explanationAnswer & explanation
Correct answer: D. Create a new policy group specifically for the S3 encryption policy and assign a custom scan schedule to it.
Prisma Cloud allows policies to be organized into policy groups. These groups can then be assigned custom scan schedules, enabling administrators to set different evaluation frequencies for specific sets of policies without impacting the global scan interval or other policies.
Why the other options are wrong
- A. While possible via API, triggering on-demand scans hourly is less efficient and more complex to manage than using a built-in scheduled policy group, which is designed for this purpose.
- B. An alert rule affects when an alert is generated, not when the underlying policy is evaluated against resources.
- C. Modifying the global scan interval would affect all policies, which contradicts the requirement to only affect this specific policy.
Prisma Cloud Policy Groups & Schedules
A feature in Prisma Cloud that allows administrators to logically group compliance policies and assign them unique scan schedules, enabling fine-grained control over policy evaluation frequency.
- Organizes policies for easier management.
- Enables custom scan intervals for specific policy sets.
- Helps optimize resource utilization by varying scan frequency for different policy types.
Memory trick: For specific policy timing, group them up and set their own clock.