Palo Alto Networks SecOps-Pro Exam - Topic 2 Question 8 Discussion

Actual exam question for Palo Alto Networks's SecOps-Pro exam

Question #: 8
Topic #: 2

Which dashboard or module in Cortex XSIAM provides visibility into unmanaged devices, unauthorized shadow IT, and cloud assets that do not currently have a Cortex agent installed?

AHost Insights

BAsset Inventory

CCloud Discovery & Exposure

DIdentity Analytics

Show Suggested Answer

Suggested Answer: C

Cloud Discovery & Exposure (part of the broader Attack Surface Management/ASM capabilities in XSIAM) is designed to solve the problem of 'blind spots' in an organization's infrastructure.

Unmanaged Assets: While the Asset Inventory shows what is currently managed, Cloud Discovery looks for what isn't. It scans cloud environments (AWS, Azure, GCP) and public-facing IP ranges to find servers or storage buckets that were created without the security team's knowledge.

Risk Identification: It identifies assets that are missing the Cortex agent or have exposed ports (like RDP or SSH open to the internet), allowing the SOC to proactively secure the attack surface before an attacker finds the same vulnerabilities.

by Dick at Aug 13, 2026, 02:51 PM

Limited Time Offer

25%

1 month ago

I think it might be Asset Inventory, but I'm not entirely sure. I remember it covering various assets.

upvoted 0 times

...