A customer has multiple violations in the environment including: User namespace is enabled An LDAP server is enabled SSH root is enabled Which section of Console should the administrator use to review these findings?

The violations listed—"User namespace is enabled," "An LDAP server is enabled," and "SSH root is enabled"—are related to the security configuration and hardening of hosts or containers. In the Prisma Cloud Compute Console, findings of this nature are reviewed in the Compliance section. This section is specifically designed to report on adherence to security benchmarks (e.g., CIS Benchmarks for Docker and Kubernetes) and custom-defined configuration rules. It provides a centralized view for administrators to assess the compliance posture of their compute resources against established security standards.

A. The Manage section is used for system administration tasks like configuring users, licenses, and integrations, not for reviewing security findings.
B. The Vulnerabilities section is dedicated to displaying Common Vulnerabilities and Exposures (CVEs) in software packages, not configuration compliance issues.
C. The Radar section offers a visual topology of the environment and its security posture but is not the primary interface for detailed compliance reports.

1. Palo Alto Networks, Prisma Cloud Compute Edition Administrator's Guide. The "Compliance" chapter details how the platform "lets you check your containers, images, hosts, and functions for compliance against custom and predefined checks," which directly corresponds to the types of violations listed in the question.

2. Palo Alto Networks, Prisma Cloud Compute Edition Administrator's Guide. The "Vulnerability Management" chapter clarifies that this area focuses on CVEs, distinguishing it from the configuration checks found in the Compliance section.