A company is onboarding its Azure subscription to Prisma Cloud. The security team wants to ingest Azure Activity Logs to monitor for suspicious administrative actions. They have already created the subscription and granted Prisma Cloud access. What is the next step to enable audit log ingestion?

Configure Azure Sentinel to forward logs to Prisma Cloud.

Deploy a virtual machine in Azure to forward Activity Logs to Prisma Cloud.

Enable the Azure Activity Log integration in Prisma Cloud and select the subscription to monitor.

Create a storage account and export Activity Logs to it for Prisma Cloud to access.

A company has sensitive data in AWS S3 and Azure Blob Storage. They have enabled DSPM in Prisma Cloud. The compliance team wants to ensure that data classification is up-to-date and that new sensitive data is identified promptly. What is the most effective way to achieve this?

Configure DSPM to continuously monitor the storage services and alert on new or changed sensitive data.

Run a manual DSPM scan on a quarterly basis to update the classification.

Use agentless scanning to classify data in S3 and Blob Storage.

Use audit logs to identify new sensitive data based on access patterns.

A company runs serverless functions on AWS Lambda and Azure Functions. The security team wants to identify misconfigurations and security issues in these functions, such as overly permissive IAM roles and exposed environment variables. They do not want to install agents on the functions. What should they use?

Serverless function scanning, which analyzes the function configuration and code for security issues.

Container registry scanning, which can scan the function code for vulnerabilities.

Agentless scanning, which can directly analyze the running Lambda functions.

Audit log integration, which can detect misconfigurations from function execution logs.

What is the primary role of Cortex XSIAM in the context of cloud data?

To provide a data lake for storing all cloud data

To replace the cloud provider's native logging services

To manage cloud resource provisioning and scaling

To ingest and analyze cloud telemetry for threat detection and response

What is the primary purpose of Data Security Posture Management (DSPM) in a cloud environment?

To provide a virtual private network for cloud data transfers

To automatically remediate all misconfigurations in cloud resources

To identify, classify, and monitor sensitive data across cloud resources

To replace the need for a cloud access security broker (CASB)

Palo Alto NetworksCertified Cloud Security Engineer

Domain 2Objective 1

2.1 Explain the Onboarding and Configuration Process for Cloud Provider Resources (e.g., AWS, Azure, GCP, OCI) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Integration domain, which accounts for 16% of the CLOUD-SECURITY-ENGINEER exam.

29questions here

6free pages

8concepts

16%of the exam

Questions 6–10

6application · medium
A company is onboarding its Azure subscription to Prisma Cloud. The security team wants to ingest Azure Activity Logs to monitor for suspicious administrative actions. They have already created the subscription and granted Prisma Cloud access. What is the next step to enable audit log ingestion?
Select an answer first
7expert · hard
A company has sensitive data in AWS S3 and Azure Blob Storage. They have enabled DSPM in Prisma Cloud. The compliance team wants to ensure that data classification is up-to-date and that new sensitive data is identified promptly. What is the most effective way to achieve this?
Select an answer first
8application · medium
A company runs serverless functions on AWS Lambda and Azure Functions. The security team wants to identify misconfigurations and security issues in these functions, such as overly permissive IAM roles and exposed environment variables. They do not want to install agents on the functions. What should they use?
Select an answer first
9foundation · easy
What is the primary role of Cortex XSIAM in the context of cloud data?
Select an answer first
10foundation · easy
What is the primary purpose of Data Security Posture Management (DSPM) in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.