What is the most reliable and extensive source for documentation on Prisma Cloud APIs?

Prisma Cloud Administrator's Guide

Prisma Cloud Compute has been installed on Onebox. After Prisma Cloud Console has been accessed. Defender is disconnected and keeps returning the error 'No console connectivity' in the logs.What could be causing the disconnection between Console and Defender in this scenario?

Port 8084 is not open for Console and Defender communication.

Port 8083 is not open for Console and Defender communication.

The license key provided to the Console is invalid.

Port 8084 is not open for Console and Defender communication.

Onebox script installed an older version of the Defender.

Which statement applies to Adoption Advisor?

It includes security capabilities from subscriptions for CSPM, CWP, CCS, OEM, and Data Security.

It helps adopt security capabilities at a fixed pace regardless of the organization's needs.

It only provides guidance during the deploy phase of the application lifecycle.

It is only available for organizations that have completed the cloud adoption journey.

It includes security capabilities from subscriptions for CSPM, CWP, CCS, OEM, and Data Security.

How does assigning an account group to an administrative user on Prisma Cloud help restrict access to resources?

It restricts access only to the resources and data that pertains to the cloud account(s) within an account group.

It restricts access only to certain types of resources within the cloud account.

It restricts access to all resources and data within the cloud account.

It restricts access only to the resources and data that pertains to the cloud account(s) within an account group.

It does not restrict access to any resources within the cloud account.

Which three actions are required in order to use the automated method within Azure Cloud to streamline the process of using remediation in the identity and access management (IAM) module? (Choose three.)

Configure IAM Azure remediation script.

Integrate with Azure Service Bus.

Install azure.servicebus & requests library.

Install boto3 & requests library.

Configure IAM Azure remediation script.

Integrate with Azure Service Bus.

Configure IAM AWS remediation script.

Install azure.servicebus & requests library.

An administrator has added a Cloud account on Prisma Cloud and then deleted it.What will happen if the deleted account is added back on Prisma Cloud within a 24-hour period?

Existing alerts will be displayed again.

Existing alerts will be marked as resolved.

In which two ways can Prisma Cloud images be retrieved in Prisma Cloud Compute Self-Hosted Edition? (Choose two.)

Authenticate with Prisma Cloud registry, and then pull the images from the Prisma Cloud registry.

Retrieve Prisma Cloud images using URL auth by embedding an access token.

Pull the images from the Prisma Cloud registry without any authentication.

Authenticate with Prisma Cloud registry, and then pull the images from the Prisma Cloud registry.

Retrieve Prisma Cloud images using URL auth by embedding an access token.

Download Prisma Cloud images from github.paloaltonetworks.com.

Where can Defender debug logs be viewed? (Choose two.)

From the Console, Manage > Defenders > Manage > Defenders. Select the Defender from the deployed Defenders list, then click Actions > Logs

/var/lib/twistlock/log/defender.log

/var/lib/twistlock/defender.log

From the Console, Manage > Defenders > Manage > Defenders. Select the Defender from the deployed Defenders list, then click Actions > Logs

From the Console, Manage > Defenders > Deploy > Defenders. Select the Defender from the deployed Defenders list, then click Actions > Logs

/var/lib/twistlock/log/defender.log

An administrator wants to retrieve the compliance policies for images scanned in a continuous integration (CI) pipeline.Which endpoint will successfully execute to enable access to the images via API?

GET /api/v22.01/policies/compliance/ci/images

GET /api/v22.01/policies/compliance

GET /api/v22.01/policies/compliance/ci

GET /api/v22.01/policies/compliance/ci/images

GET /api/v22.01/policies/compliance/ci/serverless

The attempted bytes count displays?

traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

traffic that is either denied by the security group or firewall rules.

traffic that is either denied by the firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

traffic denied by the security group or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

What are two alarm types that are registered after alarms are enabled? (Choose two.)

Onboarded Cloud Accounts status

What is the correct method for ensuring key-sensitive data related to SSNs and credit card numbers cannot be viewed in Dashboard > Data view during investigations?

Go to Settings > Data > Snippet Masking and select Full Mask.

Go to Settings > Data > Data Patterns, search for SSN Pattern, edit it, and modify the proximity keywords.

Go to Settings > Cloud Accounts > Edit Cloud Account > Assign Account Group and select a group with limited permissions.

Go to Policies > Data > Clone > Modify Objects containing Financial Information publicly exposed and change the file exposure to Private.

Which action must be taken to enable a user to interact programmatically with the Prisma Cloud APIs and for a nonhuman entity to be enabled for the access keys?

Create a role and assign it to the Service Account.

Create a role with System Admin and generate access keys.

Create a user with a role that has minimal access.

Create a role with Account Group Read Only and assign it to the user.

Create a role and assign it to the Service Account.

Who can access saved searches in a cloud account?

Users who can access the tenant

All users with whom the saved search has been shared

The Compute Console has recently been upgraded, and the administrator plans to delay upgrading the Defenders and the Twistcli tool until some of the team's resources have been rescaled. The Console is currently one major release ahead.What will happen as a result of the Console upgrade?

Both Defenders and Twistcli will remain working.

Defenders will disconnect, and Twistcli will stop working.

Defenders will disconnect, and Twistcli will remain working.

Both Defenders and Twistcli will remain working.

Defenders will remain connected, and Twistcli will stop working.

What are two key requirements for integrating Okta with Prisma Cloud when multiple Amazon Web Services (AWS) cloud accounts are being used? (Choose two.)

A valid subscription for the IAM security module

Multiple instances of the Okta app

Super Administrator permissions

A valid subscription for the IAM security module

An Okta API token for the primary AWS account

Multiple instances of the Okta app

Which resource and policy type are used to calculate AWS Net Effective Permissions? (Choose two.)

AWS Service Control Policies (SCPs)

Amazon Resource Names (ARNs) using Wild Cards

AWS Service Control Policies (SCPs)

What will happen when a Prisma Cloud Administrator has configured agentless scanning in an environment that also has Host and Container Defenders deployed?

Agentless scans do not conflict with Defender scans, so both will run.

Agentless scan will automatically be disabled, so Defender scans are the only scans occurring.

Agentless scans do not conflict with Defender scans, so both will run.

Defender scans will automatically be disabled, so agentless scans are the only scans occurring.

Both agentless and Defender scans will be disabled and an error message will be received.

An administrator of Prisma Cloud wants to enable role-based access control for Docker engine.Which configuration step is needed first to accomplish this task?

Set Defender's listener type to TCP.

Configure Docker's authentication sequence to first use an identity provider and then Console.

Set Defender's listener type to TCP.

Set Docker's listener type to TCP.

Configure Defender's authentication sequence to first use an identity provider and then Console.

Which of the below actions would indicate -- ''The timestamp on the compliance dashboard?

indicates when the data was aggregated for the results displayed

indicates the most recent alert generated

indicates when the data was ingested

indicates when the data was aggregated for the results displayed

Palo Alto Networks PCCSE Practice Test 4 - Free Online Exam Prep & Questions

Web-Application and API Security (WAAS) provides protection for which two protocols? (Choose two.)

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PCCSE Practice Test 4

Question

Palo Alto Networks PCCSE Practice Tests

Practice Tests