Practice Cloud Security Engineer PCCSE exam. Online Exam Practice Tests with detailed explanations! Pass PCCSE with confidence!
PCCSE - Prisma Certified Cloud Security Engineer Practice Tests 2021 | Pass4Leader
NEW QUESTION 24
Which three types of buckets exposure are available in the Data Security module? (Choose three.)
- A. Conditional
- B. Differential
- C. Public
- D. International
- E. Private
Answer: A,B,D
NEW QUESTION 25
A customer wants to scan a serverless function as part of a build process. Which twistcli command can be used to scan serverless functions?
- A. twistcli serverless AWS <SERVERLESS_FUNCTION.ZIP>
- B. twiscli serverless scan <SERVERLESS_FUNCTION.ZIP>
- C. twistcli function scan <SERVERLESS_FUNCTION.ZIP>
- D. twistcli scan serverless <SERVERLESS_FUNCTION.ZIP>
Answer: B
NEW QUESTION 26
The Unusual protocol activity (Internal) network anomaly is generating too many alerts An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely.
Which strategy should the administrator use to achieve this goal?
- A. Change the Training Threshold to Low
- B. Set Alert Disposition to Aggressive
- C. Disable the policy
- D. Set the Alert Disposition to Conservative
Answer: A
NEW QUESTION 27
Which statement is true regarding CloudFormation templates?
- A. Request-Header-Field 'cloudformation-version' is required to request a scan.
- B. Scan support does not currently exist tor nested references, macros, or intrinsic functions.
- C. A single template or a zip archive of template files cannot be scanned with a single API request.
- D. Scan support is provided for JSON. HTML and YAML formats.
Answer: B
NEW QUESTION 28
Match the correct scanning mode for each given operation.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
Answer:
Explanation:
NEW QUESTION 29
A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time.
What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)
- A. all Defenders set in read-only mode before execution of the rolling upgrade
- B. manual installation of the latest twistcli tool prior to the rolling upgrade
- C. an existing Console at version n-1
- D. a second location where you can install the Console
- E. additional workload licenses are required to perform the rolling upgrade
Answer: A,C
NEW QUESTION 30
The security team wants to protect a web application container from an SQLi attack? Which type of policy should the administrator create to protect the container?
- A. Compliance
- B. CNAF
- C. CNNF
- D. Runtime
Answer: C
NEW QUESTION 31
A customer has Defenders connected to Prisma Cloud Enterprise. The Defenders are deployed as a DaemonSet in OpenShift.
How should the administrator get a report of vulnerabilities on hosts?
- A. Navigate to Defend > Vulnerabilities > VM Images
- B. Navigate to Monitor > Vulnerabilities > CVE Viewer
- C. Navigate to Defend > Vulnerabilities > Hosts
- D. Navigate to Monitor > Vulnerabilities > Hosts
Answer: D
NEW QUESTION 32
Which port should a security team use to pull data from Console's API?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 33
A customer has a development environment with 50 connected Defenders A maintenance window is set for Monday to upgrade 30 stand-alone Defenders in the development environment, but there is no maintenance window available until Sunday to upgrade the remaining 20 standalone Defenders .
Which recommended action manages this situation?
- A. Open a support case with Palo Alto Networks to arrange an automatic upgrade
- B. Upgrade a subset of the Defenders by clicking the individual Actions > Upgrade button in the row that corresponds to the Defender that should be upgraded during the maintenance window
- C. Find a maintenance window that is suitable to upgrade all stand alone Defenders in the development environment
- D. Go to Manage > Defender > Manage, then click Defenders, and use the Scheduler to choose which Defenders will be automatically upgraded during the maintenance window
Answer: C
NEW QUESTION 34
Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default Where should the customer navigate in Console?
- A. Manage > Compliance
- B. Defend > Compliance
- C. Custom > Compliance
- D. Monitor > Compliance
Answer: D
NEW QUESTION 35
Which options show the steps required after upgrade of Console?
- A. Upgrade Defenders Upgrade Jenkins Plugin
Upgrade twistcli where applicable - B. Uninstall Defenders Upgrade Jenkins Plugin
Upgrade twistcli where applicable
Allow the Console to redeploy the Defender - C. Update the Console image in the Twistlock hosted registry Update the Defender image in the Twistlock hosted registry Uninstall Defenders
- D. Update the Console image in the Twistlock hosted registry Update the Defender image in the Twistlock hosted registry Redeploy Console
Answer: A
NEW QUESTION 36
An organization wants to be notified immediately to any "High Seventy" alerts for the account group
"Clinical Trials" via Slack Which option shows the steps should the organization can use to achieve this goal?
- A. 1. Configure Slack Integration
2 Create an alert rule and select "Clinical Trials" as the account group
3. Under the "Select Policies" tab filter on seventy and select "High"
4. Under the Set Alert Notification tab choose Slack and populate the channel
5. Set Frequency to "As it Happens" - B. 1. Under the "Select Policies" tab filter on seventy and select "High"
2. Under the Set Alert Notification tab choose Slack and populate the
3. Set Frequency to "As it Happens"
4. Configure Slack Integration
5. Create an Alert rule - C. 1. Create an alert rule and select "Clinical Trials" as the account group
2. Under the "Select Policies" tab filter on seventy and select "High"
3. Under the Set Alert Notification tab choose Slack and populate the channel
4. Set Frequency to "As it Happens"
5. Set up the Slack Integration to complete the configuration - D. 1 Configure Slack Integration
2. Create an alert rule
3. Under the "Select Policies" tab, filter on seventy and select "High"
4. Under the Set Alert Notification tab- choose Slack and populate the channel
5. Set Frequency to "As it Happens"
Answer: A
NEW QUESTION 37
Which container scan is constructed correctly?
- A. twistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 --details myimage/latest
- B. twistcli images scan -u api -p api --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
- C. twistcli images scan --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/ latest
- D. twistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 -- container myimage/latest
Answer: C
NEW QUESTION 38
How are the following categorized?
* Backdoor account access
* Hijacked processes
* Lateral movement
* Port scanning
- A. audits
- B. incidents
- C. admission controllers
- D. models
Answer: A
NEW QUESTION 39
An organization wants to be notified immediately to any "High Severity" alerts for the account group "Clinical Trials" via Slack.
Which option shows the steps the organization can use to achieve this goal?
- A. 1. Configure Slack Integration
2. Create an alert rule
3. Under the "Select Policies" tab, filter on severity and select "High"
4. Under the Set Alert Notification tab, choose Slack and populate the channel
5. Set Frequency to "As it Happens" - B. 1. Create an alert rule and select "Clinical Trials" as the account group
2. Under the "Select Policies" tab, filter on severity and select "High"
3. Under the Set Alert Notification tab, choose Slack and populate the channel
4. Set Frequency to "As it Happens"
5. Set up the Slack Integration to complete the configuration - C. 1. Configure Slack Integration
2. Create an alert rule and select "Clinical Trials" as the account group
3. Under the "Select Policies" tab, filter on severity and select "High"
4. Under the Set Alert Notification tab, choose Slack and populate the channel
5. Set Frequency to "As it Happens" - D. 1. Under the "Select Policies" tab, filter on severity and select "High"
2. Under the Set Alert Notification tab, choose Slack and populate the channel
3. Set Frequency to "As it Happens"
4. Configure Slack Integration
5. Create an Alert rule
Answer: B
NEW QUESTION 40
......
Get instant access to PCCSE practice exam questions: https://drive.google.com/open?id=1t1jsieoeNaAmFNVvY-ZrLKXTwpMK3J2T
The best PCCSE exam study material and preparation tool is here: https://www.pass4leader.com/Palo-Alto-Networks/PCCSE-exam.html