Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Easy
A security engineer is setting up Prisma Cloud to protect a serverless application deployed on AWS Lambda. They need to ensure that the Lambda functions are scanned for vulnerabilities and that their runtime behavior is monitored for anomalous activity. Which Prisma Cloud Defender type is required for this specific use case?
- AServerless Defender
- BContainer Defender
- CHost Defender
- DNetwork Defender
Show answer & explanationAnswer & explanation
Correct answer: A. Serverless Defender
The Serverless Defender is specifically designed to protect serverless functions like AWS Lambda. It provides capabilities for vulnerability scanning and runtime monitoring tailored to the unique nature of serverless environments.
Why the other options are wrong
- B. Container Defenders protect containerized applications running on platforms like Kubernetes or Docker.
- C. Host Defenders protect virtual machines and physical servers, not serverless functions.
- D. Network Defender is not a standard Prisma Cloud Defender type; network protection is part of other Defenders.
Serverless Defender
Prisma Cloud Defender specifically designed to secure serverless functions (e.g., AWS Lambda, Azure Functions).
- Provides vulnerability scanning for function code and dependencies.
- Monitors runtime behavior for anomalies and policy violations.
- Offers protection against supply chain attacks and insecure configurations.
Memory trick: Different Defenders for different digital domains.