A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)

Question

Options

• Acustomize message on blocked requests
• Bindividual actions based on package type
• Coutput verbosity for blocked requests
• Dapply policy only when vendor fix is available
• Eindividual grace periods for each severity level

• A
  4% (1)
• C
  96% (24)

Explanation

Prisma Cloud vulnerability policies support three relevant configuration options here: (C) output verbosity for blocked requests controls how much detail is logged/reported when a request is blocked; (D) apply policy only when vendor fix is available reduces noise by only alerting when a patch exists, making alerts actionable; and (E) individual grace periods for each severity level lets teams set different remediation windows depending on how critical a vulnerability is (e.g., Critical gets 7 days, Low gets 30 days). Options A (customize message on blocked requests) and B (individual actions based on package type) are not standard vulnerability policy configuration options in Prisma Cloud.

No community discussion yet for this question.