3.2 Explain the Role of Posture Security Management Modules CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A multi-national company uses Prisma Cloud to manage security across hundreds of AWS accounts. They want to enforce a policy that all S3 buckets must have encryption enabled, and they want to automatically remediate any bucket that violates this policy. Which module should they configure to achieve this?

   • ACompliance module
   • BThreat Detection module
   • CGovernance module
   • DVulnerability Management module
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is required to meet both GDPR and ISO 27001. They have deployed Prisma Cloud and want to minimize manual effort in maintaining compliance. They also need to ensure that any new cloud resource is automatically checked for compliance before deployment. Which approach best meets these needs?

   • AUse the Threat Detection module to alert on non-compliance
   • BUse only the Compliance module and manually review resources
   • CUse only the Governance module with custom policies
   • DUse the Compliance module to monitor against both frameworks and the Governance module to enforce pre-deployment policies
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A financial services company must demonstrate compliance with PCI DSS to its auditors. The cloud security team has deployed Prisma Cloud and needs to continuously monitor their AWS and Azure environments for PCI DSS requirements. They also want to generate evidence that controls are in place. Which Prisma Cloud module should they primarily rely on?

   • ACompliance module
   • BThreat Detection module
   • CGovernance module
   • DVulnerability Management module
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security operations center (SOC) wants to receive real-time alerts when unusual API calls are made in their AWS environment, such as an IAM user attempting to access resources outside their normal pattern. Which Prisma Cloud module provides this capability?

   • ACompliance module
   • BThreat Detection module
   • CVulnerability Management module
   • DGovernance module
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What type of guidance does the Prisma Cloud Vulnerability Management module provide after identifying a vulnerability?

   • ACompliance report generation
   • BRemediation guidance
   • CUser access policy recommendations
   • DNetwork segmentation advice
   Reveal Solution Discussion Select an answer first