Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Medium
A security team is implementing a custom policy in Prisma Cloud to monitor for specific file access patterns within their containerized applications, such as unauthorized attempts to modify critical configuration files. Which security capability within Prisma Cloud's Container Defender allows for the definition and enforcement of such granular file access policies?
- AVulnerability Management
- BProcess & Network Policies
- CImage Assurance
- DFile Integrity Monitoring (FIM)
Show answer & explanationAnswer & explanation
Correct answer: D. File Integrity Monitoring (FIM)
File Integrity Monitoring (FIM) in Prisma Cloud's Defender allows administrators to define which files and directories should be monitored for unauthorized changes, including access attempts and modifications, within containers and hosts.
Why the other options are wrong
- A. Vulnerability Management identifies software flaws, not runtime file access patterns.
- B. Process & Network Policies control what processes can run and what network connections are allowed, not file access.
- C. Image Assurance focuses on pre-deployment scanning and policy enforcement for container images.
Prisma Cloud File Integrity Monitoring (FIM)
File Integrity Monitoring (FIM) in Prisma Cloud allows defining policies to monitor specific files and directories within containers and hosts for unauthorized access, modification, or deletion, alerting on any deviations.
- Monitors critical files and directories
- Detects unauthorized changes, access, or deletion
- Key component of runtime defense
Memory trick: FIM is the vigilant guardian of your container's files.