3.2 Explain the Role of Posture Security Management Modules CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a strict policy that any security incident must be reported to management within 24 hours. They use Prisma Cloud and want to ensure that threat alerts are not missed and that they can correlate threats with compliance violations. What should they do?

   • AEnable only Compliance module and generate reports
   • BEnable Threat Detection and integrate with Compliance module for correlated reporting
   • CEnable Governance module to block threats
   • DEnable only Threat Detection and rely on email alerts
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A cloud security team wants a single dashboard that shows their overall security posture, including compliance status, vulnerability findings, and active threats. They also want to prioritize remediation efforts based on risk. Which approach best achieves this?

   • AUse only the Threat Detection module for alerts
   • BUse only the Compliance module to generate reports
   • CUse only the Vulnerability Management module to scan images
   • DIntegrate all posture security modules in Prisma Cloud
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team is overwhelmed by the number of vulnerability alerts from Prisma Cloud. They want to focus on the most critical vulnerabilities that are actively exploited in the wild. They also want to reduce noise by excluding low-severity findings. Which approach should they take?

   • AManually review all vulnerability alerts
   • BUse the Compliance module to identify critical vulnerabilities
   • CConfigure the Vulnerability Management module to filter by CVSS score and exploitability
   • DDisable vulnerability scanning and rely on threat detection
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company wants to automatically remediate security misconfigurations, such as leaving security groups open to the world, but they are concerned about accidentally disrupting production workloads. They want to implement a policy that first alerts, then after a grace period, automatically fixes the issue. Which module and feature should they use?

   • AGovernance module with automated remediation and alerting
   • BCompliance module with manual remediation
   • CVulnerability Management module with patching
   • DThreat Detection module with alerting only
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How do the posture security modules work together to provide a unified view of cloud security posture?

   • ABy replacing each other depending on the cloud provider
   • BBy integrating data from compliance, governance, vulnerability, and threat detection into a single dashboard
   • CBy providing separate dashboards for each module
   • DBy operating independently with no data sharing
   Reveal Solution Discussion Select an answer first