Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?

Question

Options

• ACloud Workload Protection (CWP)
• BCloud Code Security
• CCloud Network Security
• DCloud Identity Security

• B
  5% (2)
• C
  93% (41)
• D
  2% (1)

Explanation

Cloud Network Security (C) is correct because it is the Prisma Cloud pillar specifically designed to control network traffic - securing outbound connections, preventing lateral movement between workloads (east-west traffic), and blocking inbound threats at the network layer. It provides capabilities like microsegmentation, DNS security, and network policy enforcement across cloud environments.

Why the others are wrong:

• A (Cloud Workload Protection) focuses on protecting compute workloads (VMs, containers, serverless) from vulnerabilities, malware, and runtime threats - not network traffic control.
• B (Cloud Code Security) addresses securing the software supply chain and IaC templates during development - a "shift-left" pillar, not a runtime network control.
• D (Cloud Identity Security) governs who can access what through identity and entitlement management (CIEM) - it's about permissions, not traffic flows.

Memory tip: Think of the "three directions of traffic" - inbound, outbound, and lateral (side-to-side). Any time a question asks about controlling traffic direction, that's a Network Security question. The word "outbound" or "lateral movement" in the stem is your signal to pick the Network pillar.

No community discussion yet for this question.