Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Easy
A security auditor needs to verify that all Linux hosts running critical applications across an organization's hybrid cloud environment comply with the CIS Benchmark for Linux. The auditor requires detailed reports highlighting specific deviations and recommendations for remediation. Which Prisma Cloud capability is most appropriate for this task?
- ARuntime Process and Network Policies
- BVulnerability Explorer
- CHost Compliance Explorer
- DImage Vulnerability Scanning
Show answer & explanationAnswer & explanation
Correct answer: C. Host Compliance Explorer
Host Compliance Explorer in Prisma Cloud is specifically designed to scan host configurations against industry benchmarks like CIS, providing detailed reports on deviations and remediation guidance.
Why the other options are wrong
- A. Runtime Process and Network Policies enforce behavior on running containers/hosts, but don't provide compliance auditing reports.
- B. Vulnerability Explorer focuses on software vulnerabilities, not host configuration compliance.
- D. Image Vulnerability Scanning applies to container images, not running host operating systems.
Prisma Cloud Host Compliance Explorer
Prisma Cloud's Host Compliance Explorer continuously assesses host configurations against security benchmarks and regulatory standards.
- Supports industry benchmarks (e.g., CIS, PCI DSS).
- Provides detailed reports on compliance posture.
- Offers remediation recommendations for identified deviations.
Memory trick: Check your hosts against the rules, then fix what's broken.