Prisma Certified Cloud Security Engineer (PCCSE) — Question 196

A customer wants to monitor its Amazon Web Services (AWS) accounts via Prisma Cloud, but only needs the resource configuration to be monitored at present.

Which two pieces of information are needed to onboard this account? (Choose two.)

Answer options

• A. CloudTrail
• B. Role ARN
• C. Active Directory ID
• D. External ID

Correct answer: B, D

Explanation

To successfully onboard an AWS account to Prisma Cloud for monitoring resource configurations, the Role ARN is necessary to grant the required permissions, and the External ID is used to enhance security during the cross-account access setup. The other options, CloudTrail and Active Directory ID, are not essential for this specific onboarding process.