Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Medium
A large enterprise is adopting a multi-cloud strategy and needs to enforce consistent security policies across their AWS, Azure, and Google Cloud Platform environments. They want to ensure that all deployed virtual machines and container hosts meet specific compliance benchmarks, such as CIS hardening guides. Which Prisma Cloud capability is crucial for achieving this consistent compliance posture across diverse cloud providers?
- AServerless Function Protection
- BCloud Security Posture Management (CSPM)
- CHost and Container Compliance Scanning
- DWeb Application Firewall (WAF) Integration
Show answer & explanationAnswer & explanation
Correct answer: C. Host and Container Compliance Scanning
Prisma Cloud's Host and Container Compliance Scanning feature allows organizations to assess and enforce compliance benchmarks (like CIS) across various cloud and on-premises environments for their virtual machines and container hosts, ensuring a consistent security posture.
Why the other options are wrong
- A. Serverless Function Protection focuses on serverless code, not VMs or container hosts.
- B. CSPM primarily focuses on cloud configurations and services, not the OS/runtime within VMs/containers.
- D. WAF Integration protects web applications from attacks, not host/container compliance.
Prisma Cloud Host and Container Compliance Scanning
Automated assessment of virtual machines and container hosts against industry-standard compliance benchmarks like CIS, across multi-cloud environments.
- Ensures OS and runtime configurations meet security best practices.
- Supports various compliance standards (e.g., CIS, PCI DSS).
- Provides unified visibility and reporting across diverse environments.
Memory trick: Compliance across clouds means scanning every host and container for rules.