Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

Question

Options

• AAllow Prisma Cloud to automatically optimize registry scans with version pattern matching.
• BAllow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.
• CExplicitly specify the Defender to do the job.
• DExplicitly specify the predefined version pattern-matching algorithm.

• A
  74% (29)
• C
  10% (4)
• D
  15% (6)

Explanation

When Prisma Cloud scans a registry, it is designed to handle two things automatically: distributing scan workloads and optimizing which images to scan. Option A is correct because Prisma Cloud can automatically use version pattern matching (e.g., wildcards, tag filters) to avoid redundant scans of unchanged image versions. Option B is correct because Prisma Cloud can automatically load-balance the scan job across a pool of available Defenders, improving efficiency and resilience without manual intervention.

Why C is wrong: Explicitly assigning a single Defender defeats the purpose of the distributed architecture - Prisma Cloud handles Defender selection automatically, and pinning one creates a bottleneck.

Why D is wrong: There is no step requiring you to explicitly specify a predefined pattern-matching algorithm; the platform handles version pattern optimization on its own (that's what option A describes).

Memory tip: Think "Let Prisma AUTO-mate it." Both correct answers involve allowing Prisma Cloud to do something automatically (auto-distribute, auto-optimize). The wrong answers both say explicitly specify, which signals unnecessary manual override of built-in automation.

No community discussion yet for this question.