PCCSE Exam Dumps : Prisma Certified Cloud Security Engineer

The Cloud Discovery feature in Prisma Cloud allows engineers to monitor accounts continuously and report on cloud-native services that are unprotected across different cloud service providers. This feature requires specific permissions to access and assess the cloud environment's configuration and security posture. Thus, the correct answer is D: It enables engineers to continuously monitor all accounts and report on the services that are unprotected.

To create a custom policy within a cloud security platform like Prisma Cloud, security teams have the flexibility to either add a new policy from scratch or clone an existing one to serve as a foundation for customization. Adding a new policy allows for the creation of a completely tailored rule set based on specific security requirements. Cloning an existing policy, on the other hand, provides a quick start by using the structure of an already established policy, which can then be modified to fit particular needs. This approach is beneficial for maintaining consistency with existing policies while addressing unique security scenarios. Disabling an out-of-the-box policy (option C) or editing the query in an out-of-the-box policy (option D) are actions that might be taken to customize policy enforcement but do not equate to the creation of a new custom policy.