3.4 Explain the Creation and Configuration of Cloud Workload Rules and Policies (e.g., Custom Rules, Scanner Type, Misconfiguration, Malware, Secrets, Trusted Images) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A company uses Prisma Cloud to protect its Kubernetes cluster. The security team wants to detect malware in their container images. They want to be alerted when a medium or higher severity threat is detected. Which scanner type and configuration should they use?

   • AUse an agent-based scanner and create a malware detection rule with a severity threshold of 'Medium'.
   • BUse a serverless scanner and create a malware detection rule with a severity threshold of 'High'.
   • CUse a registry scanner and create a malware detection rule with a severity threshold of 'Medium'.
   • DUse a host scanner and create a malware detection rule with a severity threshold of 'High'.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What types of data do secrets detection rules in Prisma Cloud identify in cloud workloads?

   • AMalware signatures and malicious code patterns
   • BMisconfigured network security groups
   • CUnapproved container image sources
   • DAPI keys, passwords, and other sensitive credentials
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   What is the purpose of a trusted images policy in Prisma Cloud?

   • ATo allowlist approved image sources and block untrusted ones
   • BTo remediate misconfigured container deployments
   • CTo scan images for malware and vulnerabilities
   • DTo detect exposed secrets in container images
   Reveal Solution Discussion Select an answer first