4.5 Explain the Features and Functionality of Cortex Cloud CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security operations team is evaluating Palo Alto Networks cloud security products. They already have Prisma Cloud for posture management and want a single platform that unifies threat detection, investigation, and response across their cloud and on-premises environments. What is the core value proposition of Cortex Cloud in this context?

   • AIt only monitors on-premises environments
   • BIt replaces Prisma Cloud's posture management with a more advanced CSPM engine
   • CIt provides AI-driven detection and automated response across cloud and on-premises, complementing Prisma Cloud's posture and workload protection
   • DIt provides a standalone firewall for cloud workloads
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of Cloud Workload Protection Platform (CWPP) in Cortex Cloud?

   • ATo monitor and manage user permissions and entitlements
   • BTo manage network security groups and firewall rules
   • CTo provide a dashboard for compliance reporting
   • DTo secure cloud workloads, including containers and serverless functions, against threats
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization already uses Prisma Cloud for comprehensive cloud security posture management and workload protection. They are now adopting Cortex Cloud for its AI-driven threat detection and response capabilities. Which statement best describes how these two products should be used together?

   • APrisma Cloud should be decommissioned because Cortex Cloud duplicates all its features
   • BPrisma Cloud continues to provide posture and workload protection while Cortex Cloud adds detection and response with XSIAM integration
   • CCortex Cloud replaces Prisma Cloud entirely for all security functions
   • DCortex Cloud only works if Prisma Cloud is deployed in the same cloud region
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has Prisma Cloud deployed for CSPM and CWPP. They want to add Cortex Cloud to improve threat detection and response. What is the recommended integration approach?

   • ADeploy Cortex Cloud and connect it to Prisma Cloud data sources for enhanced detection and response
   • BUse Cortex Cloud only for compliance reporting
   • CReplace Prisma Cloud with Cortex Cloud for all security functions
   • DRun Cortex Cloud only on-premises and keep Prisma Cloud in the cloud
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company detects a suspicious API call in Azure that appears to be an attacker using a compromised service principal. The security team wants Cortex Cloud to automatically isolate the affected workload and revoke the compromised credentials without manual intervention. Which integration should they configure?

   • ACortex Cloud with CSPM compliance alerts only
   • BCortex Cloud with Prisma Cloud Compute only
   • CCortex Cloud with XSIAM automated response playbooks
   • DCortex Cloud with CIEM policy reports only
   Reveal Solution Discussion Select an answer first