Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Easy
A security engineer is tasked with configuring Prisma Cloud to perform vulnerability scanning on virtual machines (VMs) running in their cloud environment. The engineer needs to ensure that the scanning process is agent-based for comprehensive analysis. Which Prisma Cloud component is primarily responsible for performing host vulnerability scanning on these VMs?
- ACloud Discovery
- BServerless Defender
- CHost Defender
- DContainer Defender
Show answer & explanationAnswer & explanation
Correct answer: C. Host Defender
The Host Defender is the Prisma Cloud component specifically designed for agent-based protection and scanning of virtual machines and physical hosts, including vulnerability management.
Why the other options are wrong
- A. Cloud Discovery focuses on identifying cloud assets and their configurations, not agent-based vulnerability scanning.
- B. Serverless Defender protects serverless functions and applications, not traditional virtual machines.
- D. Container Defender secures containerized environments and images, not the underlying host VMs directly.
Prisma Cloud Host Defender
The Host Defender is an agent deployed on virtual machines or physical hosts to provide comprehensive security, including vulnerability management, compliance, and runtime protection.
- Agent-based deployment
- Protects VMs and physical servers
- Performs vulnerability scanning and compliance checks
Memory trick: Host, Container, Serverless: Each Defender knows its place.