Palo Alto Networks PCCSE Dumps Updated Mar 08, 2023 WIith 200 Questions
View All PCCSE Actual Free Exam Questions Mar 08, 2023 Updated
NEW QUESTION 110
Match the service on the right that evaluates each exposure type on the left.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
Answer:
Explanation:
NEW QUESTION 111
Which two IDE plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.)
- A. BitBucket
- B. IntelliJ
- C. Visual Studio Code
- D. CircleCI
Answer: A,D
NEW QUESTION 112
A customer wants to harden its environment from misconfiguration
Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)
- A. Hosts without Defender agents
- B. Docker daemon configuration
- C. Host configuration
- D. Docker daemon configuration files
- E. Host cloud provider tags
Answer: A,C,D
NEW QUESTION 113
You wish to create a custom policy with build and run subtypes. Match the query types for each example.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
Answer:
Explanation:
NEW QUESTION 114
Who can access saved searches in a cloud account?
- A. All users with whom the saved search has been shared
- B. Users who can access the tenant
- C. Creators
- D. Administrators
Answer: A
NEW QUESTION 115
What must be created in order to receive notifications about alerts generated when the operator is away from the Prisma Cloud Console?
- A. Notification rule
- B. Alarm rule
- C. Alert rule
- D. Offline alert
Answer: A
NEW QUESTION 116
A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which three options could have generated this audit? (Choose three.)
- A. The value of the mined currency exceeds $100.
- B. Common cryptominer port usage was found.
- C. High CPU usage over time for the container is detected.
- D. The mined currency is associated with a user token.
- E. Common cryptominer process name was found.
Answer: C,D,E
NEW QUESTION 117
Which statement is true about obtaining Console images for Prisma Cloud Compute Edition?
- A. To retrieve Prisma Cloud Console images using basic auth:
1.Access registry.paloaltonetworks.com, and authenticate using 'docker login'.
2.Retrieve the Prisma Cloud Console images using 'docker pull'. - B. To retrieve Prisma Cloud Console images using basic auth:
1.Access registry.twistlock.com, and authenticate using 'docker login'.
2.Retrieve the Prisma Cloud Console images using 'docker pull'. - C. To retrieve Prisma Cloud Console images using URL auth:
1.Access registry-auth.twistlock.com, and authenticate using the user certificate.
2.Retrieve the Prisma Cloud Console images using 'docker pull'. - D. To retrieve Prisma Cloud Console images using URL auth:
1.Access registry-url-auth.twistlock.com, and authenticate using the user certificate.
2.Retrieve the Prisma Cloud Console images using 'docker pull'.
Answer: B
NEW QUESTION 118
In Prisma Cloud Software Release 22.06 (Kepler), which Registry type is added?
- A. IBM Cloud Container Registry
- B. Google Artifact Registry
- C. Sonatype Nexus
- D. Azure Container Registry
Answer: D
NEW QUESTION 119
Which "kind" of Kubernetes object is configured to ensure that Defender is acting as the admission controller?
- A. PodSecurityPolicies
- B. MutatingWebhookConfiguration
- C. DestinationRules
- D. ValidatingWebhookConfiguration
Answer: D
NEW QUESTION 120
A customer has Defenders connected to Prisma Cloud Enterprise The Defenders are deployed as a DaemonSet in OpenShift. How should the administrator get a report of vulnerabilities on hosts'?
- A. Navigate to Defend > Vulnerabilities > VM Images
- B. Navigate to Monitor > Vulnerabilities > CVE Viewer
- C. Navigate to Monitor > Vulnerabilities > Hosts
- D. Navigate to Defend > Vulnerabilities > Hosts
Answer: D
NEW QUESTION 121
An S3 bucket within AWS has generated an alert by violating the Prisma Cloud Default policy "AWS S3 buckets are accessible to public". The policy definition follows:
config where cloud.type = 'aws' AND api.name='aws-s3api-get-bucket-acl' AND json.rule="((((acl.grants[? (@.grantee=='AllUsers')] size > 0) or policyStatus.isPublic is true) and publicAccessBlockConfiguration does not exist) or ((acl.grants[?(@.grantee=='AllUsers')] size > 0) and publicAccessBlockConfiguration.ignorePublicAcis is false) or (policyStatus.isPublic is true and publicAccessBlockConfiguration.restrictPublicBuckets is false)) and websiteConfiguration does not exist" Why did this alert get generated?
- A. anomalous behaviors
- B. configuration of the S3 bucket
- C. network traffic to the S3 bucket
- D. an event within the cloud account
Answer: B
NEW QUESTION 122
Which statement is true about obtaining Console images for Prisma Cloud Compute Edition?
- A. To retrieve Prisma Cloud Console images using URL auth:
1. Access registry-url-auth.twistlock.com, and authenticate using the user certificate.
2. Retrieve the Prisma Cloud Console images using 'docker pull'. - B. To retrieve Prisma Cloud Console images using basic auth:
1. Access registry.twistlock.com, and authenticate using 'docker login'.
2. Retrieve the Prisma Cloud Console images using 'docker pull'. - C. To retrieve Prisma Cloud Console images using URL auth:
1. Access registry-auth.twistlock.com, and authenticate using the user certificate.
2. Retrieve the Prisma Cloud Console images using 'docker pull'. - D. To retrieve Prisma Cloud Console images using basic auth:
1. Access registry.paloaltonetworks.com, and authenticate using 'docker login'.
2. Retrieve the Prisma Cloud Console images using 'docker pull'.
Answer: B
Explanation:
Section: (none)
Explanation
NEW QUESTION 123
What are the three states of the Container Runtime Model? (Choose three.)
- A. Initiating
- B. Learning
- C. Running
- D. Active
- E. Archived
Answer: A,C,E
NEW QUESTION 124
Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster.
Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?
- A. From the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.
- B. From the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.
- C. From the deployment page configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.
- D. From the deployment page in Console, choose twistlock-console for Console identifier, and run the curl | bash script on the master Kubernetes node.
Answer: B
NEW QUESTION 125
Which port should a security team use to pull data from Console's API?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 126
Which three types of bucket exposure are available in the Data Security module? (Choose three.)
- A. Public
- B. International
- C. Private
- D. Conditional
- E. Differential
Answer: B,D,E
NEW QUESTION 127
A customer has a requirement to scan serverless functions for vulnerabilities.
Which three settings are required to configure serverless scanning? (Choose three.)
- A. Defender Name
- B. Console Address
- C. Credential
- D. Region
- E. Provider
Answer: C,D,E
NEW QUESTION 128
You have onboarded a public cloud account into Prisma Cloud Enterprise Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules RQL statements on the Investigate matching those policies return config resource results successfully Why are no alerts being generated''
- A. The public cloud account does not have access to configuration resources.
- B. The public cloud account is not associated with an alert notification.
- C. The public cloud account is not associated with an alert rule
- D. The public cloud account does not have audit trail ingestion enabled.
Answer: B
NEW QUESTION 129
Which data storage type is supported by Prisma Cloud Data Security?
- A. IBM Cloud Object Storage
- B. Google storage class
- C. AWS S3 buckets
- D. Oracle Object Storage
Answer: C
NEW QUESTION 130
Which two statements apply to the Defender type Container Defender - Linux?
- A. It is deployed as a container.
- B. It is implemented as runtime protection in the userspace.
- C. It is deployed as a service.
- D. It is incapable of filesystem runtime defense.
Answer: B,C
NEW QUESTION 131
A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
- A. set the Container model to relearn and set the default runtime rule to prevent for process protection.
- B. set the Container model to manual relearn and set the default runtime rule to block for process protection.
- C. add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list and set the action to "prevent".
- D. choose "copy into rule" for the Container add a ransomWare process into the denied process list and set the action to "block"
Answer: C
NEW QUESTION 132
Given the following RQL:
Which audit event snippet is identified by the RQL?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: D
NEW QUESTION 133
A customer has serverless functions that are deployed in multiple clouds.
Which serverless cloud provider is covered be "overly permissive service access" compliance check?
- A. AWS
- B. Azure
- C. Alibaba
- D. GCP
Answer: A
NEW QUESTION 134
What is the behavior of Defenders when the Console is unreachable during upgrades?
- A. Defenders will fail open until the web-socket can be reestablished.
- B. Defenders continue to alert, but not enforce, using the policies and settings most recently cached before upgrading the Console.
- C. Defenders will fail closed until the web-socket can be re-established
- D. Defenders continue to alert and enforce using the policies and settings most recently cached before upgrading the Console.
Answer: D
NEW QUESTION 135
......
New PCCSE Exam Questions Real Palo Alto Networks Dumps: https://dumpstorrent.dumpsking.com/PCCSE-testking-dumps.html
