PCCSE practice question 21 of 35
Which two integrations enable ingesting host findings to generate alerts? (Choose two.)
Full set: 259 questionsPrisma Cloud can ingest vulnerability data from external third-party scanners to enrich its security analysis and generate alerts. It has specific, built-in integrations for leading vulnerability management solutions. Among the options provided, Tenable (Tenable.io and Tenable.sc) and Qualys are two such vendors. By configuring these integrations, Prisma Cloud can pull host vulnerability findings from these platforms, correlate them with its own runtime and configuration data, and provide a unified view of risk within the Prisma Cloud console.
A. Splunk is a SIEM. The integration works in the opposite direction: Prisma Cloud sends its alerts and logs to Splunk for aggregation and analysis.
C. JIRA is an issue-tracking system. Prisma Cloud integrates with JIRA to create tickets based on its findings, not to ingest vulnerability data from it.
1. Palo Alto Networks, Prisma Cloud Administrator's Guide. "Integrate with External Services on Prisma Cloud." This section provides a list of supported third-party integrations.
2. Palo Alto Networks, Prisma Cloud Administrator's Guide. "Integrate Prisma Cloud with Qualys." The documentation states, "After you integrate Prisma Cloud with Qualys, Prisma Cloud pulls the vulnerability scan reports for all your cloud-deployed hosts..."
3. Palo Alto Networks, Prisma Cloud Administrator's Guide. "Integrate Prisma Cloud with Tenable." This section explains, "Prisma Cloud ingests the vulnerability scan reports from Tenable.io or Tenable.sc for all your cloud-deployed hosts, containers, and functions."
Keep practicing
Take the free PCCSE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCCSE practice questions
- Question 1In Prisma Cloud for Azure Net Effective Permissions Calculation, the following Azure perm…
- Question 2Which container image scan is constructed correctly?
- Question 3Given a default deployment of Console, a customer needs to identify the alerted complianc…
- Question 4A customer is reviewing Container audits, and an audit has identified a cryptominer attac…
- Question 5Which statement about build and run policies is true?
- Question 6The development team wants to fail CI jobs where a specific CVE is contained within the i…
