Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Medium
A security auditor needs to verify that all Linux hosts running critical applications across their multi-cloud environment adhere to the CIS Benchmarks for Operating Systems. They require a centralized report detailing compliance posture and identifying specific deviations. Which Prisma Cloud feature should the auditor use to achieve this?
- ACompliance Explorer
- BVulnerability Management
- CRuntime Defense
- DBehavioral Anomaly Detection (BAD)
Show answer & explanationAnswer & explanation
Correct answer: A. Compliance Explorer
Prisma Cloud's Compliance Explorer is designed to assess configurations against various compliance benchmarks, including CIS Benchmarks, and provide detailed reports on deviations across hosts, containers, and serverless functions.
Why the other options are wrong
- B. Vulnerability Management identifies software flaws, not configuration compliance.
- C. Runtime Defense protects against active threats, not audits compliance status.
- D. Behavioral Anomaly Detection identifies unusual activity, not compliance deviations.
Prisma Cloud Compliance Explorer
A feature in Prisma Cloud that allows users to assess and report on the compliance posture of their cloud resources against various industry benchmarks and custom policies.
- Supports benchmarks like CIS, PCI DSS, HIPAA.
- Provides granular reports on compliance deviations.
- Covers hosts, containers, and serverless environments.
Memory trick: Compliance Explorer: Your map to meet regulatory mountains.