PCCSE practice question 20 of 35

Which two roles have access to view the Prisma Cloud policies? (Choose two.)

Full set: 259 questions
Answer options
A: Build AND Deploy Security
B: Auditor Correct answer
C: Dev SecOps Correct answer
D: Defender Manager
Correct Answer:
B. Auditor; C. Dev SecOps
Explanation

The predefined Auditor and Dev SecOps roles include read access to the Policies page, so users with either role can view all Prisma Cloud policies. Build AND Deploy Security and Defender Manager roles do not grant policy visibility.

Why Incorrect

A. Build AND Deploy Security – Limited to Code/CI-CD modules; no permission to view Policies.
D. Defender Manager – Compute-focused role; manages Defenders but lacks CSPM policy access.

References

1. Prisma Cloud Administrator’s Guide v31.01, “Manage ➔ Access Control (RBAC) ➔ Built-in Roles”, Table ‘Permissions by Role’ – Auditor (Read Policies) & DevSecOps (Read/Edit Policies).

2. Same guide, p. 118-120 – Role descriptions showing Build AND Deploy Security and Defender Manager scopes.

Scroll to Top