PCCSE practice question 17 of 35
What will happen when a Prisma Cloud Administrator has configured agentless scanning in an environment that also has Host and Container Defenders deployed?
Full set: 259 questionsAgentless scanning and Defender-based scanning are complementary features within Prisma Cloud designed to provide layered security. Agentless scanning works by analyzing snapshots of hosts for vulnerabilities and compliance issues, offering broad visibility with easy deployment. Defenders are agents that provide deep, real-time runtime protection and more frequent scanning on the hosts where they are deployed. The Prisma Cloud platform is designed for both to operate concurrently, correlating data from both sources to provide a comprehensive security posture without conflict.
A. Agentless scan will automatically be disabled...: Prisma Cloud does not disable one scanning method for the other; they are designed to work in tandem.
C. Defender scans will automatically be disabled...: Disabling the real-time Defender agent would be a security downgrade; the platform integrates both data sources instead.
D. Both agentless and Defender scans will be disabled...: This implies a critical system flaw. The two methods are designed to be complementary, not conflicting.
Palo Alto Networks, Prisma Cloud Documentation, "Agentless Security". The official documentation states, "Agentless scanning complements the protection you get from Defenders. For comprehensive security, Palo Alto Networks recommends deploying both. When both are deployed, Defender findings take precedence." This confirms they run concurrently.
Keep practicing
Take the free PCCSE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCCSE practice questions
- Question 1In Prisma Cloud for Azure Net Effective Permissions Calculation, the following Azure perm…
- Question 2Which container image scan is constructed correctly?
- Question 3Given a default deployment of Console, a customer needs to identify the alerted complianc…
- Question 4A customer is reviewing Container audits, and an audit has identified a cryptominer attac…
- Question 5Which statement about build and run policies is true?
- Question 6The development team wants to fail CI jobs where a specific CVE is contained within the i…
