PCCSE practice question 21 of 35

Which two integrations enable ingesting host findings to generate alerts? (Choose two.)

Full set: 259 questions
Answer options
A: Splunk
B: Tenable Correct answer
C: JIRA
D: Qualys Correct answer
Correct Answer:
B. Tenable; D. Qualys
Explanation

Prisma Cloud can ingest vulnerability data from external third-party scanners to enrich its security analysis and generate alerts. It has specific, built-in integrations for leading vulnerability management solutions. Among the options provided, Tenable (Tenable.io and Tenable.sc) and Qualys are two such vendors. By configuring these integrations, Prisma Cloud can pull host vulnerability findings from these platforms, correlate them with its own runtime and configuration data, and provide a unified view of risk within the Prisma Cloud console.

Why Incorrect

A. Splunk is a SIEM. The integration works in the opposite direction: Prisma Cloud sends its alerts and logs to Splunk for aggregation and analysis.
C. JIRA is an issue-tracking system. Prisma Cloud integrates with JIRA to create tickets based on its findings, not to ingest vulnerability data from it.

References

1. Palo Alto Networks, Prisma Cloud Administrator's Guide. "Integrate with External Services on Prisma Cloud." This section provides a list of supported third-party integrations.

2. Palo Alto Networks, Prisma Cloud Administrator's Guide. "Integrate Prisma Cloud with Qualys." The documentation states, "After you integrate Prisma Cloud with Qualys, Prisma Cloud pulls the vulnerability scan reports for all your cloud-deployed hosts..."

3. Palo Alto Networks, Prisma Cloud Administrator's Guide. "Integrate Prisma Cloud with Tenable." This section explains, "Prisma Cloud ingests the vulnerability scan reports from Tenable.io or Tenable.sc for all your cloud-deployed hosts, containers, and functions."

Scroll to Top