ExamGecko
Login
Home / Palo Alto Networks / PCCSE / List of questions
Ask Question

Palo Alto Networks PCCSE Practice Test - Questions Answers, Page 9

Add to Whishlist

List of questions

Question 81

Report Export Collapse

You are an existing customer of Prisma Cloud Enterprise. You want to onboard a public cloud account and immediately see all of the alerts associated with this account based off ALL of your tenant's existing enabled policies. There is no requirement to send alerts from this account to a downstream application at this time.

Which option shows the steps required during the alert rule creation process to achieve this objective?

Become a Premium Member for full access
  Unlock Premium Member

Question 82

Report Export Collapse

A customer has configured the JIT, and the user created by the process is trying to log in to the Prisma Cloud console. The user encounters the following error message:

What is the reason for the error message?

Become a Premium Member for full access
  Unlock Premium Member

Question 83

Report Export Collapse

What are the two ways to scope a CI policy for image scanning? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 84

Report Export Collapse

Which policy type in Prisma Cloud can protect against malware?

Become a Premium Member for full access
  Unlock Premium Member

Question 85

Report Export Collapse

If you are required to run in an air-gapped environment, which product should you install?

Become a Premium Member for full access
  Unlock Premium Member

Question 86

Report Export Collapse

What is the maximum number of access keys a user can generate in Prisma Cloud with a System Admin role?

Become a Premium Member for full access
  Unlock Premium Member

Question 87

Report Export Collapse

An administrator needs to detect and alert on any activities performed by a root account.

Which policy type should be used?

Become a Premium Member for full access
  Unlock Premium Member

Question 88

Report Export Collapse

One of the resources on the network has triggered an alert for a Default Config policy.

Given the following resource JSON snippet:

Palo Alto Networks PCCSE image Question 88 53552 09232024001133000000

Which RQL detected the vulnerability?

A)

Palo Alto Networks PCCSE image Question 88 53552 09232024001133000000

B)

Palo Alto Networks PCCSE image Question 88 53552 09232024001133000000

C)

Palo Alto Networks PCCSE image Question 88 53552 09232024001133000000

D)

Palo Alto Networks PCCSE image Question 88 53552 09232024001133000000

Become a Premium Member for full access
  Unlock Premium Member

Question 89

Report Export Collapse

A customer has multiple violations in the environment including:

User namespace is enabled

An LDAP server is enabled

SSH root is enabled

Which section of Console should the administrator use to review these findings?

Become a Premium Member for full access
  Unlock Premium Member

Question 90

Report Export Collapse

A customer has serverless functions that are deployed in multiple clouds.

Which serverless cloud provider is covered be ''overly permissive service access'' compliance check?

Become a Premium Member for full access
  Unlock Premium Member
Total 260 questions
Go to page: of 26
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which two statements are true about the differences between build and run config policies? (Choose two.)
An administrator sees that a runtime audit has been generated for a host. The audit message is: ''Service postfix attempted to obtain capability SHELL by executing /bin/sh /usr/libexec/postfix/postfix- script.stop. Low severity audit, event is automatically added to the runtime model'' Which runtime host policy rule is the root cause for this runtime audit?
Which two statements explain differences between build and run config policies? (Choose two.)
Which two information types cannot be seen in the data security dashboard? (Choose two).
An administrator needs to detect and alert on any activities performed by a root account. Which policy type should be used?
You are an existing customer of Prisma Cloud Enterprise. You want to onboard a public cloud account and immediately see all of the alerts associated with this account based off ALL of your tenant's existing enabled policies. There is no requirement to send alerts from this account to a downstream application at this time. Which option shows the steps required during the alert rule creation process to achieve this objective?
Review this admission control policy: match[{'msg': msg}] { input.request.operation == 'CREATE' input.request.kind.kind == 'Pod' input.request.resource.resource == 'pods' input.request.object.spec.containers[_].securityContext.privileged msg := 'Privileged' } Which response to this policy will be achieved when the effect is set to ''block''?
How are the following categorized? Backdoor account access Hijacked processes Lateral movement Port scanning
A Prisma Cloud Administrator onboarded an AWS cloud account with agentless scanning enabled successfully to Prisma Cloud. Which item requires deploying defenders to be able to inspect the risk on the onboarded AWS account?
Which action must be taken to enable a user to interact programmatically with the Prisma Cloud APIs and for a nonhuman entity to be enabled for the access keys?