The compliance team needs to associate Prisma Cloud policies with compliance frameworks.

Which option should the team select to perform this task?

Reveal Solution Hide Solution

Review this admission control policy:

match[{"msg": msg}] { input.request.operation == "CREATE" input.request.kind.kind == "Pod"

input.request.resource.resource == "pods"

input.request.object.spec.containers[_].securityContext.privileged msg := "Privileged"

}

Which response to this policy will be achieved when the effect is set to “block”?

Reveal Solution Hide Solution

Per security requirements, an administrator needs to provide a list of people who are receiving e-mails for Prisma Cloud alerts.

Where can the administrator locate this list of e-mail recipients?

Reveal Solution Hide Solution

A customer wants to scan a serverless function as part of a build process.

Which twistcli command can be used to scan serverless functions?

Reveal Solution Hide Solution

A customer has a development environment with 50 connected Defenders. A maintenance window is set for Monday to upgrade 30 stand-alone Defenders in the development environment, but there is no maintenance window available until Sunday to upgrade the remaining 20 stand-alone Defenders.

Which recommended action manages this situation?

Reveal Solution Hide Solution

What is an example of an outbound notification within Prisma Cloud?

Reveal Solution Hide Solution

A security team has been asked to create a custom policy.

Which two methods can the team use to accomplish this goal? (Choose two.)

Reveal Solution Hide Solution

The security auditors need to ensure that given compliance checks are being run on the host.

Which option is a valid host compliance policy?

Reveal Solution Hide Solution

DRAG DROP

Match the correct scanning mode for each given operation. (Select your answer from the pull-down list. Answers may be used more than once or not at all.)

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Create SNS Topic Triggers: No data security scan

Select an S3 bucket: Forward Scan only

Select an S3 bucket with existing files: Forward or Backward Scan

Link an S3 logging to CloudTrail: Backward Scan only

The scanning mode for Data Security in AWS typically depends on the configuration and the desired outcomes for monitoring and protecting data within S3 buckets.

Creating SNS Topic Triggers is a configuration step that does not directly involve scanning. It is part of setting up notifications for events in S3 buckets, but on its own, it does not initiate a data security scan.

Selecting an S3 bucket without specifying existing files typically implies that you intend to scan new objects as they are added to the bucket, which is known as a Forward Scan. This mode is proactive and scans files upon their arrival in the bucket.

When you select an S3 bucket with existing files, you can perform either Forward Scanning for new files or Backward Scanning to scan all existing files in the bucket. This option provides the most comprehensive scanning coverage for both new and existing data.

Linking an S3 logging to CloudTrail is usually a step taken to monitor access and changes to S3 resources. In the context of scanning, linking S3 to CloudTrail does not initiate a scan, but the CloudTrail logs can be used to trigger a Backward Scan if configured to do so, which scans historical

files in the bucket based on CloudTrail events.

A customer wants to be notified about port scanning network activities in their environment.

Which policy type detects this behavior?

Reveal Solution Hide Solution