A customer wants to turn on Auto Remediation. Which policy type has the built-in CLI command for remediation?

The correct answer is C. Config. Config policies in Prisma Cloud Enterprise are the only policy type that includes a built-in CLI remediation command. When a Config policy is violated (e.g., an S3 bucket is publicly accessible), Prisma Cloud can store and execute a pre-defined CLI command (such as an AWS CLI com

Cloud Compliance and Governance

Question

Options

ANetwork
BAnomaly
CConfig
DAudit Event

How the community answered

(21 responses)

A
5% (1)
B
5% (1)
C
90% (19)

Explanation

Config policies in Prisma Cloud Enterprise are the only policy type that includes a built-in CLI remediation command. When a Config policy is violated (e.g., an S3 bucket is publicly accessible), Prisma Cloud can store and execute a pre-defined CLI command (such as an AWS CLI command) to automatically fix the misconfiguration. Network (A), Anomaly (B), and Audit Event (D) policies generate alerts but do not have built-in CLI remediation commands associated with them.

Topics

#Auto Remediation#Prisma Cloud Policies#CSPM#Configuration Policies

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice