Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Medium
A financial institution uses Prisma Cloud to secure its cloud environment. They have a strict compliance requirement to continuously monitor all EC2 instances for deviations from CIS benchmarks. Which Prisma Cloud feature should be configured to automatically assess and report on the compliance posture of these instances against the specified benchmarks?
- AVulnerability Explorer
- BImage Assurance Policy
- CCompliance Explorer
- DRuntime Defense Policy
Show answer & explanationAnswer & explanation
Correct answer: C. Compliance Explorer
Compliance Explorer in Prisma Cloud is specifically designed to provide continuous compliance monitoring and reporting against various industry benchmarks and custom policies for cloud resources, including EC2 instances.
Why the other options are wrong
- A. Vulnerability Explorer focuses on identifying and managing software vulnerabilities, not compliance against benchmarks.
- B. Image Assurance Policies are used for scanning and enforcing security policies on container images, not for EC2 instance compliance.
- D. Runtime Defense Policies are for protecting applications during execution, not for continuous compliance assessment of cloud resources.
Prisma Cloud Compliance Explorer
Compliance Explorer provides continuous monitoring and reporting of cloud resource configurations against industry benchmarks (e.g., CIS, PCI DSS) and custom compliance policies.
- Continuous compliance assessment
- Supports industry benchmarks (CIS, PCI, etc.)
- Reports on deviations from policies
Memory trick: Compliance Explorer leads the way to audit-ready cloud resources.