Get Latest Sep-2022 Real PCCSE Exam Questions and Answers FREE
Truly Beneficial For Your Palo Alto Networks Exam (Updated 128 Questions)
NEW QUESTION 10
Given the following JSON query:
$.resource[*].aws_s3_bucket exists
Which tab is the correct place to add the JSON query when creating a Config policy?
- A. Build Your Rule (Build tab)
- B. Build Your Rule (Run tab)
- C. Remediation
- D. Details
- E. Compliance Standards
Answer: C
NEW QUESTION 11
Given this information:
The Console is located at https://prisma-console.mydomain.local The username is: cluster The password is: password123 The image to scan is: myimage:latest Which twistcli command should be used to scan a Container for vulnerabilities and display the details about each vulnerability?
- A. twistcli images scan --address prisma-console.mydomain.local -u cluster -p password123
--vulnerability- details myimage:latest - B. twistcli images scan --console-address https://prisma-console.mydomain.local -u cluster -p password123
-- details myimage:latest - C. twistcli images scan --console-address prisma-console.mydomain.local -u cluster -p password123 -- vulnerability-details myimage:latest
- D. twistcli images scan --address https://prisma-console.mydomain.local -u cluster -p password123 --details myimage:latest
Answer: D
NEW QUESTION 12
If you are required to run in an air-gapped environment, which product should you install?
- A. Prisma Cloud Enterprise Edition
- B. Prisma Cloud Jenkins Plugin
- C. Prisma Cloud with self-hosted plugin
- D. Prisma Cloud Compute Edition
Answer: D
NEW QUESTION 13
The administrator wants to review the Console audit logs from within the Console Which page in the Console should the administrator use to review this data, if it can be reviewed at all?
- A. Navigate to Monitor > Events > Host Log Inspection
- B. The audit logs can be viewed only externally to the Console
- C. Navigate to Manage > View Logs > History
- D. Navigate to Manage > Defenders > View Logs
Answer: C
NEW QUESTION 14
Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Answer:
Explanation:
NEW QUESTION 15
Order the steps involved in onboarding an AWS Account for use with Data Security feature.
Answer:
Explanation:
NEW QUESTION 16
A security team notices a number of anomalies under Monitor > Events The incident response team works with the developers to determine that these anomalies are false positives.
What will be the effect if the security team chooses to Relearn on this image?
- A. The model is retained, and any new behavior observed during the new learning period will be added to the existing model
- B. The model is deleted and returns to the initial learning state
- C. The model is deleted, and Defender will releam for 24 hours.
- D. The anomalies detected will automatically be added to the model.
Answer: C
NEW QUESTION 17
Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?
- A. Download and extract the release tarball
Ensure that each node has it own storage for Console data
Create the Console task definition
Deploy the task definition - B. Download and extract release tarball
Download task from AWS
Create the Console task definition
Deploy the task definition - C. Download and extract the release tarball
Create an EPS file system and mount to each node in the cluster
Create the Console task definition
Deploy the task definition - D. The console cannot natively run in an ECS cluster.
A onebox deployment should be used.
Answer: B
NEW QUESTION 18
A manager informs the SOC that one or more RDS instances have been compromised and the SOC needs to make sure production RDS instances are NOT publicly accessible.
Which action should the SOC take to follow security best practices?
- A. Enable "AWS RDS database instance is publicly accessible" policy and for each alert, check that it is a production instance, and then manually remediate.
- B. Enable "AWS S3 bucket is publicly accessible" policy and manually remediate each alert.
- C. Enable "AWS RDS database instance is publicly accessible" policy and add policy to an auto-remediation alert rule.
- D. Enable "AWS S3 bucket is publicly accessible" policy and add policy to an auto-remediation alert rule.
Answer: C
NEW QUESTION 19
Which three steps are involved in onboarding an account for Data Security? (Choose three.)
- A. Create a read-only role with in-line policies
- B. Create a Cloudtrail with SNS Topic
- C. Enable Flow Logs
- D. Enter the RoleARN and SNSARN
- E. Create a S3 bucket
Answer: A,C,D
NEW QUESTION 20
What are the two ways to scope a CI policy for image scanning? (Choose two.)
- A. container name
- B. hostname
- C. image name
- D. image labels
Answer: C,D
NEW QUESTION 21
An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console on the default service endpoint and will be exporting to YAML Console Address SCONSOLE_ADDRESS Websocket Address SWEBSOCKHT_ADDRESS User: SADMIN USER Which command generates the YAML file for Defender install?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option D
- D. Option C
Answer: B
NEW QUESTION 22
Which three steps are involved in onboarding an account for Data Security? (Choose three.)
- A. Enter the RoleARN and SNSARN
- B. Create a read-only role with in-line policies
- C. Enable Flow Logs
- D. Create a Cloudtrail with SNS Topic
- E. Create a S3 bucket
Answer: C,D,E
NEW QUESTION 23
Which option shows the steps to install the Console in a Kubernetes Cluster?
- A. Download and extract release tarball Generate YAML for Console
Deploy Console YAML using kubectl - B. Download the Console and Defender image Generate YAML for Defender
Deploy Defender YAML using kubectl - C. Download and extract release tarball Download the YAML for Console Deploy Console YAML using kubectl
- D. Download the Console and Defender image Download YAML for Defender from the document site Deploy Defender YAML using kubectl
Answer: A
NEW QUESTION 24
Review this admission control policy:
match[{"msg": msg}] { input.request.operation == "CREATE" input.request.kind.kind == "Pod" input.request.resource.resource == "pods" input.request.object.spec.containers[_].securityContext.privileged msg := "Privileged"
}
Which response to this policy will be achieved when the effect is set to "block"?
- A. The policy will alert only the administrator when a privileged pod is created.
- B. The policy will block all pods on a Privileged host.
- C. The policy will block the creation of a privileged pod.
- D. The policy will replace Defender with a privileged Defender.
Answer: A
NEW QUESTION 25
Match the service on the right that evaluates each exposure type on the left.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
Answer:
Explanation:
Reference:
https://www.paloaltonetworks.com/prisma/cloud/cloud-data-security
NEW QUESTION 26
You are an existing customer of Prisma Cloud Enterprise. You want to onboard a public cloud account and immediately see all of the alerts associated with this account based off ALL of your tenant's existing enabled policies. There is no requirement to send alerts from this account to a downstream application at this time.
Which options shows the steps required during the alert rule creation process to achieve this objective?
- A. Ensure the public cloud account is assigned to an account group
Assign the confirmed account group to alert rule
Select one or more policies as part of the alert rule
Add alert notifications
Confirm the alert rule - B. Ensure the public cloud account is assigned to an account group
Assign the confirmed account group to alert rule
Select "select all policies" checkbox as part of the alert rule
Add alert notifications
Confirm the alert rule - C. Ensure the public cloud account is assigned to an account group
Assign the confirmed account group to alert rule
Select one or more policies checkbox as part of the alert rule
Confirm the alert rule - D. Ensure the public cloud account is assigned to an account group
Assign the confirmed account group to alert rule
Select "select all policies" checkbox as part of the alert rule
Confirm the alert rule
Answer: A
NEW QUESTION 27
The development team wants to fail CI jobs where a specific CVE is contained within the image. How should the development team configure the pipeline or policy to produce this outcome?
- A. Set the specific CVE exception as an option using the magic string in the Console.
- B. Set the specific CVE exception in Console's CI policy.
- C. Set the specific CVE exception as an option in Defender running the scan.
- D. Set the specific CVE exception as an option in Jenkins or twistcli.
Answer: B
NEW QUESTION 28
Which statement accurately characterizes SSO Integration on Prisma Cloud?
- A. Okta, Azure Active Directory. PingID, and others are supported via SAML
- B. An administrator can configure different Identity Providers (IdP) for all the cloud accounts that Prisma Cloud monitors.
- C. Prisma Cloud supports IdP initiated SSO. and its SAML endpoint supports the POST and GET methods
- D. An administrator who needs to access the Prisma Cloud API can use SSO after configuration.
Answer: A
NEW QUESTION 29
Which port should a security team use to pull data from Console's API?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 30
What is the order of steps to create a custom network policy?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Answer:
Explanation:
Explanation
A picture containing table Description automatically generated
NEW QUESTION 31
......
PCCSE dumps Free Test Engine Verified By It Certified Experts: https://www.realvce.com/PCCSE_free-dumps.html
View All PCCSE Actual Exam Questions, Answers and Explanations for Free: https://drive.google.com/open?id=1X0dbF1Auss3RPYwhhlwqtCI714AEEmds