6.1 Identify and Describe Troubleshooting Issues Related to Insufficient Cloud Service Provider (CSP) IAM Permissions, CloudFormation / Terraform Stack Failures, and Organization-Level Onboarding Related Errors, Including Ingestion CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–21

1. 21application · medium

   A cloud security engineer is onboarding a new AWS account into Palo Alto Networks Prisma Cloud. The account appears in the console, but the onboarding status shows an error: 'Failed to read account details. Please check the IAM role permissions.' The engineer verifies that the IAM role ARN is correct and that the trust policy allows the Prisma Cloud service principal. Which additional check is most likely to resolve the issue?

   • AVerify that the account is not part of an AWS Organizations organization.
   • BEnsure that the account has at least one EC2 instance running.
   • CCheck that the IAM role name does not contain hyphens.
   • DConfirm that the IAM role has the required read-only permissions for the services Prisma Cloud needs to inventory.
   Reveal Solution Discussion Select an answer first