nerdexam
Palo_Alto_Networks

PCCSE · Question #223

A customer's Security Operations Center (SOC) team wants to receive alerts from Prisma Cloud via email once a day about all policies that have a violation, rather than receiving an alert every time…

The correct answer is D. Configure an alert rule. Under the "Policies" tab, select "All Policies." In the "Set Alert Notifications". The requirement is a daily digest email covering all policy violations. Option D correctly describes: configuring an alert rule, selecting 'All Policies' under the Policies tab, and configuring the 'Set Alert Notifications' section with email and a daily frequency (digest…

Prisma Cloud Platform

Question

A customer's Security Operations Center (SOC) team wants to receive alerts from Prisma Cloud via email once a day about all policies that have a violation, rather than receiving an alert every time a new violation occurs. Which alert rule configuration meets this requirement?

Options

  • AConfigure an alert rule with all the defaults except selecting email within the "Alert Notifications"
  • BConfigure an alert rule. Under the "Policies" tab, select "High Risk Severity Policies." In the "Set
  • CSet up email integrations under the "Integrations" tab in "Settings" and create a notification
  • DConfigure an alert rule. Under the "Policies" tab, select "All Policies." In the "Set Alert Notifications"

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    3% (1)
  • D
    83% (24)

Explanation

The requirement is a daily digest email covering all policy violations. Option D correctly describes: configuring an alert rule, selecting 'All Policies' under the Policies tab, and configuring the 'Set Alert Notifications' section with email and a daily frequency (digest mode). Prisma Cloud supports both immediate (per-violation) and recurring (scheduled digest) notification modes. Option A uses defaults which typically trigger per-violation, not daily. Option B limits scope to high-risk policies only, missing the 'all policies' requirement. Option C describes setting up integrations without an alert rule, which alone does not control notification frequency.

Topics

#Prisma Cloud Alerting#Policy Violations#Notification Configuration#Daily Digests

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice