PSE-PRISMACLOUD practice question 10 of 25

Which two deployment methods are supported for Prisma Cloud Compute (PCC) container Defenders? (Choose two.)

Full set: 115 questions
Answer options
A: Azure SQL database instances
B: Google Kubernetes Engine Correct answer
C: Oracle Functions service
D: Kubernetes DaemonSet Correct answer
Correct Answer:
B. Google Kubernetes Engine; D. Kubernetes DaemonSet
Explanation

Prisma Cloud Compute container Defenders are deployed onto hosts that run containers to monitor and protect them. For Kubernetes environments, the standard and recommended deployment method is as a Kubernetes DaemonSet. This ensures that a Defender pod runs on every node in the cluster, providing comprehensive coverage. Google Kubernetes Engine (GKE) is a supported Kubernetes platform where this DaemonSet deployment method is used. Therefore, GKE is a supported environment, and DaemonSet is the specific method used within it.

Why Incorrect

A. Defenders are not deployed on managed database services like Azure SQL; they are deployed on compute hosts (VMs, container nodes) that run applications.
C. Oracle Functions is a serverless platform. While Prisma Cloud protects serverless functions, it uses a specific Serverless Defender, not the container Defender mentioned in the question.

References

Palo Alto Networks, "Prisma Cloud Administrator's Guide (Compute)". Section: "Deploy Prisma Cloud Defenders". The documentation provides detailed instructions for deploying Defenders.

Palo Alto Networks, "Prisma Cloud Administrator's Guide (Compute)". Sub-section: "Deploying Defenders on a Kubernetes cluster". This section explicitly states: "For Kubernetes, you’ll deploy Defender as a DaemonSet," and lists Google Kubernetes Engine (GKE) as a supported orchestrator.

Scroll to Top