3.5 Explain the Creation and Management of Vulnerability Policies (i.e., Issue Creation and Prevention) CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A vulnerability policy has been in place for several months. The security team notices that it is generating too many low-priority issues, overwhelming the operations team. They want to reduce noise without losing visibility into critical vulnerabilities. What should they do?

   • ACreate a new policy that duplicates the existing one with a lower severity threshold.
   • BKeep the policy unchanged but increase the alerting frequency.
   • CDisable the policy entirely and rely on manual scans.
   • DEdit the policy to increase the severity threshold to 'High' and disable the policy for low-severity findings.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which component in Prisma Cloud is responsible for evaluating scan results against vulnerability policies to generate issues?

   • AThe alert console
   • BThe policy engine
   • CThe asset inventory
   • DThe compliance dashboard
   Reveal Solution Discussion Select an answer first