On which cloud service providers can new API release information for Prisma Cloud be received?

AWS. Azure. GCP. Oracle, Alibaba

Which command correctly outputs scan results to stdout in tabular format and writes scan results to a JSON file while still sending the results to Console?

$ twistcli images scan --address --user --password --details --file-output scan-results.json nginx:latest

$ twistcli images scan --address --user --password --stdout-tabular --output-file scan-results.json nginx:latest

$ twistcli images scan --address --username --password --details --json-output scan-results.json nginx:latest

$ twistcli images scan --address --user --password --details --file-output scan-results.json nginx:latest

$ twistcli images scan --address --u --p --details --output-file scan-results.json nginx:latest

What is required for Prisma Cloud to successfully execute auto-remediation commands?

Write access to the cloud platform

Read access to the cloud platform

Write access to the cloud platform

Access to the cloud platform only for Azure

Prisma Cloud requires no access to the cloud platform

What is a benefit of the Cloud Discovery feature?

It enables engineers to continuously monitor all accounts and report on the services that are unprotected.

It does not require any specific permissions to be granted before use.

It helps engineers find all cloud-native services being used only on AWS.

It offers coverage for serverless functions on AWS only.

It enables engineers to continuously monitor all accounts and report on the services that are unprotected.

Given the following information, which twistcli command should be run if an administrator were to exec into a running container and scan it from within using an access token for authentication?* Console is located at https://prisma-console.mydomain.local* Token is: TOKEN_VALUE* Report ID is: REPORTJD* Container image running is: myimage:latest

twistcli images scan ---address https://prisma-console.mydomain.local ---token TOKEN_VALUE ---containerized --details REPORT_ID

twistcli images scan --address https://prisma-console.mydomain.local ---token TOKENVALUE ---containerized ---details myimage:latest

twistcli images scan ---console-address https://prisma-console.mydomain.local ---auth-token MY_TOKEN ---local-scan ---details myimage:latest

twistcli images scan ---address https://prisma-console.mydomain.local ---token TOKEN_VALUE ---containerized --details REPORT_ID

twistcli images scan --console-address https://prisma-console.mydomain.local --auth-token TOKEN_VALUE ---containerized ---vulnerability-details REPORT_ID

Which three AWS policy types and identities are used to calculate the net effective permissions? (Choose three).

AWS service control policies (SCPs)

A container and image compliance rule has been configured by enabling all checks; however, upon review, the container's compliance view reveals only the entries in the image below.What is the appropriate action to take next?

Change the rule options to list both failed and passed checks in the compliance rule edit window.

Deploy defenders to scan complete container compliance.

Wait until Prisma Cloud finishes the compliance scan and recheck.

Change the rule options to list both failed and passed checks in the compliance rule edit window.

Change the rule options to list only failed checks in the compliance rule edit window.

What is the primary purpose of Prisma Cloud Code Security?

To address cloud infrastructure misconfigurations in code before they become alerts or incidents

To provide a platform for developers to create custom security policies for applications

To triage alerts and incidents in realtime during deployment

To address cloud infrastructure misconfigurations in code before they become alerts or incidents

To offer instant feedback on application performance issues and bottlenecks

A Systems Engineer is the administrator of a self-hosted Prisma Cloud console. They upgraded the console to the latest version. However, after the upgrade, the console does not show all the policies configured. Before they upgraded the console, they created a backup manually and exported it to a local drive. Now they have to install a Prisma Cloud to restore from the backup that they manually created. Which Prisma Cloud version can they can restore with the backup?

The same version of the Prisma Cloud Self-Hosted Console that the backup created

Any version of Prisma Cloud Self-Hosted Console

Up to N-2 versions of the Prisma Cloud Self-Hosted Console that the backup created

The same version of the Prisma Cloud Self-Hosted Console that the backup created

The latest version of Prisma Cloud Self-Hosted Console

Which ROL query is used to detect certain high-risk activities executed by a root user in AWS?

event from cloud.audit_logs where operation IN ( 'ChangePassword', 'ConsoleLogin', 'DeactivateMFADevice', 'DeleteAccessKey' , 'DeleteAlarms' ) AND user = 'root'

event from cloud.security_logs where operation IN ( 'ChangePassword', 'ConsoleLogin', 'DeactivateMFADevice', 'DeleteAccessKey' , 'DeleteAlarms' ) AND user = 'root'

config from cloud.audit_logs where operation IN ( 'ChangePassword', 'ConsoleLogin', 'DeactivateMFADevice', 'DeleteAccessKey', 'DeleteAlarms' ) AND user = 'root'

event from cloud.audit_logs where Risk.Level = 'high' AND user = 'root'

Which two information types cannot be seen in the data security dashboard? (Choose two).

Top Publicly Exposed Objects By Data Profile

Taking which action will automatically enable all severity levels?

Navigate to Policies > Settings and ensure all severity levels are checked under 'auto-enable default policies.

Navigate to Settings > Enterprise Settings and enable all severity levels in the alarm center.

Navigate to Policies > Settings and enable all severity levels in the alarm center.

Navigate to Settings > Enterprise Settings and ensure all severity levels are checked under 'auto-enable default policies.

Navigate to Policies > Settings and ensure all severity levels are checked under 'auto-enable default policies.

Which step should a SecOps engineer implement in order to create a network exposure policy that identifies instances accessible from any untrusted internet sources?

In Policy Section-> Add Policy-> Config type -> Define Policy details Like Name,Severity-> Configure RQL query 'config from network where source.network = UNTRUSTJNTERNET and dest.resource.type = 'Instance' and dest.cloud.type = 'AWS*' -> define compliance standard -> Define recommendation for remediation & save.

In Policy Section-> Add Policy-> Network type -> Define Policy details Like Name.Severity-> Configure RQL query 'network from vpc.flow_record where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('Instance ))' -> define compliance standard -> Define recommendation for remediation & save.

In Policy Section-> Add Policy-> Network type -> Define Policy details Like Name.Severity-> Configure RQL query 'network from vpc.flow_record where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ( Instance ))' -> define compliance standard -> Define recommendation for remediation & save.

In Policy Section-> Add Policy-> Network type -> Define Policy details Like Name.Severity-> Configure RQL query 'config from network where source.network = UNTRUSTJNTERNET and dest.resource.type = 'Instance' and dest.cloud.type = 'AWS'' -> Define recommendation for remediation & save.

Console is running in a Kubernetes cluster, and Defenders need to be deployed on nodes within this cluster.How should the Defenders in Kubernetes be deployed using the default Console service name?

From the deployment page in Console, choose 'twistlock-console' for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.

From the deployment page, configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.

From the deployment page in Console, choose 'twistlock-console' for Console identifier and run the 'curl | bash' script on the master Kubernetes node.

From the deployment page in Console, choose 'pod name' for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.

What factor is not used in calculating the net effective permissions for a resource in AWS?

AWS service control policies (SCPs)

Which set of steps is the correct process for obtaining Console images for Prisma Cloud Compute Edition?

To retrieve Prisma Cloud Console images using basic authentication: 1. Access registry.paloaltonetworks.com and authenticate using 'docker login.' 2. Retrieve the Prisma Cloud Console images using 'docker pull.'

To retrieve Prisma Cloud Console images using basic authentication: 1. Access registry.twistlock.com and authenticate using 'docker login.' 2. Retrieve the Prisma Cloud Console images using 'docker pull.'

To retrieve Prisma Cloud Console images using URL authentication: 1. Access registry-url-auth.twistlock.com and authenticate using the user certificate. 2. Retrieve the Prisma Cloud Console images using 'docker pull.'

To retrieve Prisma Cloud Console images using URL authentication: 1. Access registry-auth.twistlock.com and authenticate using the user certificate. 2. Retrieve the Prisma Cloud Console images using 'docker pull.'

To retrieve Prisma Cloud Console images using basic authentication: 1. Access registry.paloaltonetworks.com and authenticate using 'docker login.' 2. Retrieve the Prisma Cloud Console images using 'docker pull.'

Which ban for DoS protection will enforce a rate limit for users who are unable to post five (5) ''. tar.gz' files within five (5) seconds?

One with an average rate of 5 and file extensions match on ''. tar.gz' on Web Application and API Security (WAAS)

One with an average rate of 5 and file extensions match on ''. tar.gz' on Cloud Native Network Firewall (CNNF)

One with a burst rate of 5 and file extensions match on ''. tar.gz' on Web Application and API Security (WAAS) *

One with a burst rate of 5 and file extensions match on ''. tar.gz' on Cloud Native Network Firewall (CNNF)

Creation of a new custom compliance standard that is based on other individual custom compliance standards needs to be automated.Assuming the necessary data from other standards has been collected, which API order should be used for this new compliance standard?

1) https://api.prismacloud.io/compliance 2) https://api.prismacloud.io/compliance/complianceld/requirement 3) https://api.prismacloud.io/compliance/requirementld/section

1) https://api.prismacloud.io/compliance/add 2) https://api.prismacloud.io/compliance/requirementld/section 3) https://api.prismacloud.io/compliance/complianceld/requirement

1) https://api.prismacloud.io/compliance 2) https://api.prismacloud.io/compliance/complianceld/requirement 3) https://api.prismacloud.io/compliance/requirementld/section

1) https://api.prismacloud.io/compliance/add 2) https://api.prismacloud.io/compliance/complianceld/requirement 3) https://api.prismacloud.io/compliance/requirementld/section

1) https://api.prismacloud.io/compliance 2) https://api.prismacloud.io/compliance/requirementld/section 3) https://api.prismacloud.io/compliance/complianceld/requirement

A customer's Security Operations Center (SOC) team wants to receive alerts from Prisma Cloud via email once a day about all policies that have a violation, rather than receiving an alert every time a new violation occurs.Which alert rule configuration meets this requirement?

Configure an alert rule. Under the 'Policies' tab, select 'All Policies.' In the 'Set Alert Notifications' tab, select 'Email > Recurring,' set to repeat every 1 day, and then enable 'Email.'

Configure an alert rule with all the defaults except selecting email within the 'Alert Notifications' tab and specifying recipient.

Configure an alert rule. Under the 'Policies' tab, select 'High Risk Severity Policies.' In the 'Set Alert Notifications' tab, select 'Email > Recurring,' set to repeat every 1 day, and enable 'Email.'

Set up email integrations under the 'Integrations' tab in 'Settings' and create a notification template.

Configure an alert rule. Under the 'Policies' tab, select 'All Policies.' In the 'Set Alert Notifications' tab, select 'Email > Recurring,' set to repeat every 1 day, and then enable 'Email.'

Which two statements explain differences between build and run config policies? (Choose two.)

Build policies allow checking for security misconfigurations in the IaC templates and ensure these issues do not get into production.

Run policies monitor resources and check for potential issues after these cloud resources are deployed.

Run and Network policies belong to the configuration policy set.

Build policies allow checking for security misconfigurations in the IaC templates and ensure these issues do not get into production.

Run policies monitor network activities in the environment and check for potential issues during runtime.

Run policies monitor resources and check for potential issues after these cloud resources are deployed.

Palo Alto Networks PCCSE Practice Test 6 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Palo Alto Networks PCCSE Practice Test 6

Question

Palo Alto Networks PCCSE Practice Tests

Practice Tests