Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Medium
A security auditor needs to verify that all Linux hosts running critical applications across different cloud providers and on-premises data centers are configured according to the CIS Linux Benchmark. The auditor requires a consolidated report showing compliance status and specific deviations for each host. Which Prisma Cloud feature would BEST facilitate this audit?
- AContainer Network Microsegmentation
- BHost Compliance Explorer
- CImage Vulnerability Scanning
- DServerless Runtime Protection
Show answer & explanationAnswer & explanation
Correct answer: B. Host Compliance Explorer
Prisma Cloud's Host Compliance Explorer provides a unified view of compliance status for hosts across diverse environments, allowing auditors to quickly identify deviations from benchmarks like CIS Linux and generate consolidated reports.
Why the other options are wrong
- A. Container Network Microsegmentation controls container network traffic, not host OS compliance.
- C. Image Vulnerability Scanning focuses on container images, not host OS configurations.
- D. Serverless Runtime Protection is for serverless functions, not Linux hosts.
Prisma Cloud Host Compliance Explorer
A centralized dashboard and reporting tool for viewing and managing the compliance posture of Linux and Windows hosts against various benchmarks.
- Provides consolidated compliance reports across hybrid environments.
- Highlights specific deviations from chosen benchmarks (e.g., CIS).
- Enables auditors to quickly assess host security posture.
Memory trick: Explorer finds all host compliance details, making audits a breeze.