CloudSec-Pro practice question 33 of 35

Which two integrations enable ingesting host findings to generate alerts? (Choose two.)

Full set: 258 questions
Answer options
A: Splunk
B: Tenable Correct answer
C: JIRA
D: Qualys Correct answer
Correct Answer:
B. Tenable; D. Qualys
Explanation

Prisma Cloud enhances its host security posture by integrating with third-party vulnerability management solutions. It can ingest vulnerability scan reports from both Tenable (Tenable.io and Tenable.sc) and Qualys. Prisma Cloud then correlates the CVEs from these reports with the specific hosts in your monitored environment, centralizing vulnerability data and enabling the creation of targeted alerts and compliance policies within the platform.

Why Incorrect

A. Splunk: Splunk is an alert provider integration. Prisma Cloud sends alerts to Splunk for aggregation and analysis; it does not ingest host findings from Splunk.
C. JIRA: JIRA is an alert provider integration used for ticketing. Prisma Cloud sends alerts to JIRA to create issues for remediation, not ingest findings.

References

1. Palo Alto Networks, Prisma Cloud Administrator's Guide (Compute). "Vulnerability Management." The guide states, "Prisma Cloud can import vulnerability reports from Tenable and Qualys. When a report is imported, Prisma Cloud correlates the CVEs with the images, containers, and hosts in your environment."

2. Palo Alto Networks, Prisma Cloud Administrator's Guide (Compute). "Alert Providers." This section lists Splunk and JIRA as destinations for alerts generated by Prisma Cloud, confirming their role as outputs, not inputs for findings.

Scroll to Top