PCCSE practice question 17 of 35

What will happen when a Prisma Cloud Administrator has configured agentless scanning in an environment that also has Host and Container Defenders deployed?

Full set: 259 questions
Answer options
A: Agentless scan will automatically be disabled, so Defender scans are the only scans occurring.
B: Agentless scans do not conflict with Defender scans, so both will run. Correct answer
C: Defender scans will automatically be disabled, so agentless scans are the only scans occurring.
D: Both agentless and Defender scans will be disabled and an error message will be received.
Correct Answer:
B. Agentless scans do not conflict with Defender scans, so both will run.
Explanation

Agentless scanning and Defender-based scanning are complementary features within Prisma Cloud designed to provide layered security. Agentless scanning works by analyzing snapshots of hosts for vulnerabilities and compliance issues, offering broad visibility with easy deployment. Defenders are agents that provide deep, real-time runtime protection and more frequent scanning on the hosts where they are deployed. The Prisma Cloud platform is designed for both to operate concurrently, correlating data from both sources to provide a comprehensive security posture without conflict.

Why Incorrect

A. Agentless scan will automatically be disabled...: Prisma Cloud does not disable one scanning method for the other; they are designed to work in tandem.
C. Defender scans will automatically be disabled...: Disabling the real-time Defender agent would be a security downgrade; the platform integrates both data sources instead.
D. Both agentless and Defender scans will be disabled...: This implies a critical system flaw. The two methods are designed to be complementary, not conflicting.

References

Palo Alto Networks, Prisma Cloud Documentation, "Agentless Security". The official documentation states, "Agentless scanning complements the protection you get from Defenders. For comprehensive security, Palo Alto Networks recommends deploying both. When both are deployed, Defender findings take precedence." This confirms they run concurrently.

Scroll to Top