Which two data sources are ingested by Prisma Cloud? (Choose two.)

Prisma Cloud ingests data from a wide variety of sources to provide comprehensive cloud security. Two fundamental data sources are configuration metadata and network flow logs. It ingests configuration metadata from cloud service provider APIs to perform Cloud Security Posture Management (CSPM), continuously assessing resources against security policies and compliance standards. Additionally, for network visibility and threat detection, Prisma Cloud ingests and analyzes network flow logs (e.g., AWS VPC Flow Logs, Azure VNet Flow Logs, GCP VPC Flow Logs) to map traffic, identify anomalous behavior, and enforce microsegmentation.

B. Prisma Cloud assesses the security configuration of database instances (e.g., encryption, public access) but does not ingest internal schema details like table lists.
D. Cortex Data Lake is a separate Palo Alto Networks product for storing security data, primarily for Cortex XDR. Prisma Cloud ingests data directly from cloud environments, not from Cortex Data Lake.

1. Official Vendor Documentation (Palo Alto Networks): Prisma Cloud Administrator's Guide (Cloud) - "How Prisma Cloud Works".

Reference for C: The documentation states

"Prisma® Cloud ingests metadata from the public cloud providers using read-only API access to your cloud environments." This confirms the ingestion of configuration metadata for CSPM.

Reference for A: In the section "Monitor Network and Host Activity for Threat Detection

" it details

"To provide visibility on network traffic and to detect network-based threats

Prisma Cloud ingests and analyzes your network flow logs." This explicitly confirms the ingestion of network flow logs.

2. Official Vendor Documentation (Palo Alto Networks): Prisma Cloud Datasheet.

Reference for C: Under the "Cloud Security Posture Management (CSPM)" feature description

it mentions

"Continuously discover resources and assess configurations against 1

000+ policies mapped to 20+ compliance standards." This process relies on ingesting configuration metadata.

Reference for A: Under the "Cloud Network Security" feature description

it states

"Provides deep visibility into network traffic by analyzing flow logs and applying machine learning and threat intelligence to detect network anomalies and threats." This directly supports the ingestion of network flow logs.