PCCSE practice question 15 of 35

Which three public cloud providers are supported for VM image scanning? (Choose three.)

Full set: 259 questions
Answer options
A: GCP Correct answer
B: Alibaba
C: Oracle
D: AWS Correct answer
E: Azure Correct answer
Correct Answer:
A. GCP; D. AWS; E. Azure
Explanation

Prisma Cloud provides agentless scanning capabilities, which include scanning VM images for vulnerabilities and compliance issues. This feature is supported across the three major public cloud providers: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). The platform integrates directly with the cloud providers' APIs to discover and scan virtual machine instances and their underlying images without requiring an agent to be installed on each VM, offering broad visibility across these environments.

Why Incorrect

B. While Prisma Cloud offers some security capabilities for Alibaba Cloud, comprehensive agentless VM image scanning is not listed as a primary supported feature.
C. Support for Oracle Cloud Infrastructure (OCI) in Prisma Cloud is more limited compared to the top three providers and does not include agentless VM image scanning.

References

- Palo Alto Networks, Prisma Cloud Docs, "Agentless Scanning". The overview section states, "Agentless scanning lets you inspect the risks in your hosts and containers on AWS, Azure, and GCP without having to install a Defender on every host."

- Palo Alto Networks, Prisma Cloud Datasheet, "Agentless Security". The document highlights support for AWS, Azure, and Google Cloud for its agentless capabilities, including vulnerability scanning on VMs.

- Palo Alto Networks, Prisma Cloud Administrator's Guide (Cloud), "Onboard AWS/Azure/GCP Accounts for Agentless Scanning". The documentation provides distinct, detailed procedures for onboarding each of these three specific cloud providers for the agentless scanning feature.

Scroll to Top