What happens when a role is deleted in Prisma Cloud?

The access key associated with that role is automatically deleted.

Any integrations that use the access key to make calls to Prisma Cloud will stop working.

The users associated with that role will be deleted.

Any user who uses that key will be deleted.

While writing a custom RQL with array objects in the investigate page, which type of auto-suggestion a user can leverage?

Auto-suggestion is not available for array objects

Auto-sugestion for array objects that are useful for comparing between arrays

Auto-suggestion is not available for array objects

Auto-suggestion for array objects that are useful for categorization of resource parameters

Auto-suggestion for array objects that are useful for comparing between array elements

The exclamation mark on the resource explorer page would represent?

the resource was modified recently

resource has compliance violation

Where are Top Critical CVEs for deployed images found?

Monitor Vulnerabilities Vulnerabilities Explorer

Defend Vulnerabilities Code Repositories

Monitor Vulnerabilities Vulnerabilities Explorer

Which categories does the Adoption Advisor use to measure adoption progress for Cloud Security Posture Management?

Visibility, Compliance, Governance, and Threat Detection and Response

Network, Anomaly, and Audit Event

Visibility, Security, and Compliance

Foundations, Advanced, and Optimize

Which alerts are fixed by enablement of automated remediation?

All applicable open alerts regardless of when they were generated, with alert status updated to 'resolved'

Only the open alerts that were generated before the enablement of remediation, with alert status updated to 'resolved'

All applicable open alerts regardless of when they were generated, with alert status updated to 'dismissed'

Only the open alerts that were generated after the enablement of remediation, with alert status updated to 'resolved'

Which two offerings will scan container images in Jenkins pipelines? (Choose two.)

Prisma Cloud Visual Studio Code plugin with Jenkins integration

Which two statements apply to the Defender type Container Defender - Linux?

It is implemented as runtime protection in the userspace.

It is incapable of filesystem runtime defense.

How is the scope of each rule determined in the Prisma Cloud Compute host runtime policy?

By the collection assigned to that rule

By the order in which it is created

By the type of network traffic it controls

A Prisma Cloud Administrator needs to enable a Registry Scanning for a registry that stores Windows images. Which of the following statement is correct regarding this process?

There are Windows host defenders deployed in your environment already.

They can deploy any type of container defender to scan this registry.

There are Windows host defenders deployed in your environment already.

There are Windows host defenders deployed in your environment already. Therefore, they do not need to deploy any additional defenders.

A defender is not required to configure this type of registry scan.

Which RQL query will help create a custom identity and access management (1AM) policy to alert on Lambda functions that have permission to terminate EC2 instances?

config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name = 'ec2:TerminateInstances'

iam from cloud.resource where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name = 'ec2:TerminateInstances'

config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'ec2' AND source.cloud.resource.type = 'instance' AND dest.cloud.service.name = 'lambda' AND action.name = 'ec2:TerminateInstances'

iam from cloud.resource where cloud.type equals 'AWS' AND cloud.resource.type equals 'lambda function' AND cloud.service.name = 'ec2' AND action.name equals 'ec2:TerminateInstances'

config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name = 'ec2:TerminateInstances'

In which Console menu would an administrator verify whether a custom compliance check is failing or passing?

Container Security > Compliance

In Azure, what permissions need to be added to Management Groups to allow Prisma Cloud to calculate net effective permissions?

Microsoft.Management/managementGroups/descendants/read

Microsoft.Management/managementGroups/descendants/calculate

PaloAltoNetworks.PrismaCloud/managementGroups/descendants/read

PaloAltoNetworks.PrismaCloud/managementGroups/

What is the purpose of Incident Explorer in Prisma Cloud Compute under the 'Monitor' section?

To correlate individual events to identify potential attacks and provide a sequence of process, file system, and network events for a comprehensive view of an incident

To sort through large amounts of audit data manually in order to identify developing attacks

To store large amounts of forensic data on the host where Console runs to enable a more rapid and effective response to incidents

To correlate individual events to identify potential attacks and provide a sequence of process, file system, and network events for a comprehensive view of an incident

To identify and suppress all audit events generated by the defender

Which RQL will trigger the following audit event activity?

event from cloud.audit_logs where operation ConsoleLogin AND user = 'root'

event from cloud.audit_logs where operation IN ('cloudsql.instances.update','cloudsql.sslCerts.create', cloudsql.instances.create','cloudsq

event from cloud.audit_logs where cloud.service = s3.amazonaws.com' AND json.rule = $.userAgent contains 'parrot1

event from cloud.audit_logs where operation IN ( 'GetBucketWebsite', 'PutBucketWebsite', 'DeleteBucketWebsite')

Palo Alto Networks PCCSE Practice Test 5 - Free Online Exam Prep & Questions

Under which tactic is ''Exploit Public-Facing Application'' categorized in the ATT&CK framework?

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PCCSE Practice Test 5

Question

Palo Alto Networks PCCSE Practice Tests

Practice Tests