Exam PCCSE All QuestionsBrowse all questions from this exam
Question 47

A customer wants to harden its environment from misconfiguration.

Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

    Correct Answer: A, B, D

    Prisma Cloud Compute Compliance enforcement for hosts covers Docker daemon configuration files, Docker daemon configuration, and host configuration. Docker daemon configuration addresses potential misconfigurations within the Docker daemons, while Docker daemon configuration files ensure that the critical configuration files are properly secured to prevent unauthorized changes. Host configuration verifies the broader setup of the host to ensure it complies with security standards.

Discussion
SpippoloOptions: ABD

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/host_scanning Host configuration: Compliance issues in the host setup. Docker daemon configuration: Compliance issues that stem from misconfiguring your Docker daemons. Docker daemon derives its configuration from various files, including /etc/sysconfig/docker or /etc/default/docker. Misconfigured daemons affect all container instances on a host. Docker daemon configuration files: Compliance issues that arise from improperly securing critical configuration files with the correct permissions.

Joe27Options: ABD

You can e.g. select 'host config', 'daemon config' and 'daemon config files' as types in the compliance rule.

JiheOptions: ABD

ABD https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/host_scanning