Home

Home / Palo Alto Networks / PCCSE

Question list

List of questions

Question 1

(0)

A customer wants to be notified about port scanning network activities in their environment. Which policy type detects this behavior?

Question 2

(0)

A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening on port 8080 and i

Question 3

(0)

Which three types of buckets exposure are available in the Data Security module? (Choose three.)

Question 4

(0)

The administrator wants to review the Console audit logs from within the Console. Which page in the Console should the administrator use to review this data, if it can be reviewed at all?

Question 5

(0)

Which statement is true regarding CloudFormation templates?

Question 6

(0)

Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default. Where should the customer navigate in Console?

Question 7

(0)

Which container scan is constructed correctly?

Question 8

(0)

The development team wants to fail CI jobs where a specific CVE is contained within the image. How should the development team configure the pipeline or policy to produce this outcome?

Question 9

(0)

Which three types of classifications are available in the Data Security module? (Choose three.)

Question 10

(0)

A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed. How should the administrator configure Prisma Cloud Compute to satis

Open VPLUS File

Convert VPLUS to PDF

Related questions

Which three types of runtime rules can be created? (Choose three.)

DRAG DROP What is the order of steps in a Jenkins pipeline scan? (Drag the steps into the correct order of occurrence, from the first step to the last.)

DRAG DROP Match the correct scanning mode for each given operation. (Select your answer from the pull-down list. Answers may be used more than once or not at all.)

Which type of query is used for scanning Infrastructure as Code (laC) templates?

Where can a user submit an external new feature request?

What should be used to associate Prisma Cloud policies with compliance frameworks?

Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in Azure cloud? (Choose two.)

A customer has a requirement to restrict any container from resolving the name www.evil-url.com . How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can be performed by the Terraform script? (Choose two.)

DRAG DROP You wish to create a custom policy with build and run subtypes. Match the query types for each example. (Select your answer from the pull-down list. Answers may be used more than once or not at all.)

Question 260 - PCCSE discussion

Report

Based on the following information, which RQL query will satisfy the requirement to identify VM hosts deployed to organization public cloud environments exposed to network traffic from the internet and affected by Text4Shell RCE (CVE-2022-42889) vulnerability?

* Network flow logs from all virtual private cloud (VPC) subnets are ingested to the Prisma Cloud Enterprise Edition tenant.

* All virtual machines (VMs) have Prisma Cloud Defender deployed.

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Show Answer

asked 23/09/2024

Ehsan Ali

40 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first