Palo Alto Networks PCCSE Practice Test - Questions Answers, Page 25

https://www.paloaltonetworks.com/prisma/cloud/cloud-data-security

Reference:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloudpolicies/create-a- policy.html

For a custom config Resource Query Language (RQL) in Prisma Cloud, two essential attributes are 'json.rule' and 'api.name.' The 'json.rule' attribute allows users to specify the JSON structure that defines the criteria or conditions of the query, essentially dictating what the query is looking for within the cloud environment. The 'api.name' attribute identifies the specific API endpoint that the query will target, providing context and scope for the query. Together, these attributes enable users to craft precise and targeted queries that can assess the configuration and security posture of cloud resources, aiding in compliance checks, security assessments, and other governance tasks.

https://www.paloaltonetworks.com/blog/prisma-cloud/cloud-iac-build-policies/

While agentless scanning in Prisma Cloud can effectively assess various risks in cloud environments, including host compliance and vulnerabilities, it does not extend to container runtime risks. To inspect risks associated with container runtimes, such as real-time threat detection, behavioral monitoring, and deep visibility into container activity, deploying Prisma Cloud Defenders is necessary. These Defenders are lightweight agents that provide an additional layer of security by monitoring containerized applications in real-time, thereby offering comprehensive protection against threats that may arise during the runtime phase of containers.

In Prisma Cloud, configuration policies are categorized to align with the different phases of the cloud security lifecycle, emphasizing a holistic approach to cloud security management. The subtypes 'Build and Run' encapsulate this approach by covering both the development phase (Build) - where cloud resources and applications are designed and created, and the operational phase (Run) - where these resources and applications are deployed and actively used. This categorization ensures that security and compliance are integral throughout the lifecycle, from the initial creation of cloud infrastructure and applications to their deployment and day-to-day operation, thereby enhancing the overall security posture.

The 'Data' policy type in Prisma Cloud is specifically designed to protect against threats related to data, including malware. These policies focus on securing data at rest and in transit, implementing data loss prevention (DLP) mechanisms, and scanning data stores and payloads for malicious content. By employing data policies, Prisma Cloud ensures that data stored within cloud environments is safeguarded against unauthorized access, exfiltration, and malware, thereby maintaining the integrity and confidentiality of sensitive information.