Where can rules be configured and viewed to configure trusted images?

Defend > Compliance > Trusted Images

Monitor > Compliance > Trusted Images

Defend > Compliance > Trusted Images

What occurs with the command twistcli when scanning images?

If option '--user' is used, it is mandatory to use option '--password.

If options are listed after the image name; they will be ignored.

If option '--user' is used, it is mandatory to use option '--password.

If option '--address' is unspecified, all images are scanned.

Option '--output-file' cannot be used in conjunction with option '--details.'

Which statement applies to optimization of registry scans with version pattern matching?

It is only necessary in registries with tens of thousands of repositories and millions of images.

It requires Linux images to rely on optimizing registry scans due to various Linux elements.

It is only necessary in registries with tens of thousands of repositories and millions of images.

It is best practice to always optimize registry scans for faster results.

It is rarely successful in the Windows Operating System (OS).

Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

Elastic Compute Cloud (EC2) instances

Network Address Translation (NAT) gateways

Which statement reflects the default vulnerability management policy?

Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.

Policy rule order has little impact on optimization.

Prisma Cloud scans images in all containers immediately upon policy activation.

The default vulnerability policy rule has an alert threshold to critical.

Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.

Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?

event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'bigquery.googleapis.com'

event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'Google Bigtable Instance'

event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'cloudsql.googleapis.com'

event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'bigquery.googleapis.com'

event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'dataproc.googleapis.com'

Which pillar of the Prisma Cloud platform allows cloud entitlements to be quickly audited and secured?

Cloud Security Posture Management

Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?

Cloud Workload Protection (CWP)

Cloud Security Posture Management

Cloud Workload Protection (CWP)

Under which operating systems (OSs) is twistcli supported?

Linux, macOS, PAN-OS, and Windows

Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

Allow Prisma Cloud to automatically optimize registry scans with version pattern matching.

Allow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.

Allow Prisma Cloud to automatically optimize registry scans with version pattern matching.

Allow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.

Explicitly specify the Defender to do the job.

Explicitly specify the predefined version pattern-matching algorithm.

An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

The CI policy will fail the build; therefore, the image will not be deployed.

The image will pass the CI policy, but will be blocked by the deployed policy; therefore, it will not be deployed.

The CI policy will fail the build; therefore, the image will not be deployed.

The image will be deployed successfully, and all vulnerabilities will be reported.

The image will be deployed successfully, but no vulnerabilities will be reported.

Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = is TERMINATED

config from cloud.resource where api.name = 'gcloud-compute-instances-list' = TERMINATED

config from cloud.resource where api.name = 'gcloud-compute-instances-list* and json.rule == status TERMINATED

config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = status contains TERMINATED

All Amazon Regional Database Service (RDS)-deployed resources and the regions in which they are deployed can be identified by prisma Cloud using which two methods? (Choose two.)

Write an RQL query from the 'Investigate' tab.

Open the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Configure an Inventory report from the 'Alerts' tab.

Write an RQL query from the 'Investigate' tab.

Open the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Generate a compliance report from the Compliance dashboard.

Which regulatory framework in Prisma Cloud measures compliance with European Union (EU) data privacy regulations in Amazon Web services (AWS) workloads?

General Data Protection Regulation (GDPR)

International Organization for Standardization (ISO) 27001

Payment Card Industry (PCI) Data Security Standard (DSS) 3.0

EU Data Protection Directive 95/46/EC

What does Prisma Cloud execute to change public cloud infrastructure when autoremediation is enabled?

remote function calls to host agents

local scripts to public cloud APIs

remote function calls to host agents

In which two ways can Prisma Cloud Compute (PCC) edition be installed? (Choose two.)

self-managed in a customer's own container platform

Cloud-hosted as part of a Prisma Cloud Enterprise tenant from Palo Alto Networks

self-managed in a customer's own container platform

self-contained hardware appliance

as a stand-alone Windows application

Cloud-hosted as part of a Prisma Cloud Enterprise tenant from Palo Alto Networks

What are two business values of Cloud Code Security? (Choose two.)

consistent controls from build time to runtime

continuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

consistent controls from build time to runtime

prebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects

support for multiple languages, runtimes and frameworks

continuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

Config from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = status contains TERMINATED

Config from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = status == TERMINATED

Config from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = TERMINATED

Config from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = status contains TERMINATED

Config from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = is TERMINATED

Which Resource Query Language (RQL) query monitors all 'delete' activities for the user 'user1'?

event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'

event where crud = 'delete' AND subject = 'user1'

event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'

Palo Alto Networks PSE-PrismaCloud Practice Test 3 - Free Online Exam Prep & Questions

Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PSE-PrismaCloud Practice Test 3

Question

Palo Alto Networks PSE-PrismaCloud Practice Tests

Practice Tests