Which two services require external notifications to be enabled for policy violations in the Prisma Cloud environment? (Choose two.)

The correct answer is A. Splunk C. SQS. Splunk (A) and SQS (C) are third-party/external services that require explicit external notification integration to be configured in Prisma Cloud before they can receive policy violation alerts. These services exist outside the Prisma Cloud platform and need API tokens, queue…

Security Operations and Incident Response

Question

Options

ASplunk
BQROC
CSQS
DEmail

How the community answered

(20 responses)

A
90% (18)
B
5% (1)
D
5% (1)

Explanation

Splunk (A) and SQS (C) are third-party/external services that require explicit external notification integration to be configured in Prisma Cloud before they can receive policy violation alerts. These services exist outside the Prisma Cloud platform and need API tokens, queue URLs, or endpoint configurations to be set up. Email (D) is a built-in notification channel in Prisma Cloud that does not require a separate external integration to be enabled. QROC (B) is not a recognized notification integration in Prisma Cloud.

Topics

#Prisma Cloud Notifications#External Integrations#Policy Violation Alerting#SIEM Integration

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice