PCCSE Practice Questions

A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)

Which three steps are involved in onboarding an account for Data Security? (Choose three.)

A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which three options could have generated this audit? (Choose three.)

An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console on the default service endpoint and will be exporting to YAML. - Consol...

The Prisma Cloud administrator has configured a new policy. Which steps should be used to assign this policy to a compliance standard?

Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default. Where should the customer navigate in Console?

What is an example of an outbound notification within Prisma Cloud?

You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is necessary to complete this policy?

A customer does not want alerts to be generated from network traffic that originates from trusted internal networks. Which setting should you use to meet this customer's request?

A business unit has acquired a company that has a very large AWS account footprint The plan is to immediately start onboarding the new company's AWS accounts into Prisma Cloud Ente...

How are the following categorized? - Backdoor account access - Hijacked processes - Lateral movement - Port scanning

A security team has been asked to create a custom policy. Which two methods can the team use to accomplish this goal? (Choose two )

A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can be performed by the Terraform script? (Choose two.)

You are an existing customer of Prisma Cloud Enterprise. You want to onboard a public cloud account and immediately see all of the alerts associated with this account based off ALL...

Which options show the steps are required to upgrade Console when using projects?

An organization wants to be notified immediately to any "High Seventy" alerts for the account group "Clinical Trials" via Slack. Which option shows the steps should the organizatio...

The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number...

The development team wants to fail CI jobs where a specific CVE is contained within the image. How should the development team configure the pipeline or policy to produce this outc...

A customer has Prisma Cloud Enterprise and host Defenders deployed What are two options that allow an administrator to upgrade Defenders? (Choose two )

An administrator has access to a Prisma Cloud Enterprise What are the steps to deploy a single container Defender on an ec2 node?

The development team wants to block Cross Site Scripting attacks from pods its environment How should the team construct the CNAF policy to protect against this attack?

A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening...

An administrator sees that a runtime audit has been generated for a Container The audit message is DNS resolution of suspicious name wikipedia.com. type A". Why would this message...

Which three types of classifications are available in the Data Security module? (Choose three. )

A customer finds that an open alert from the previous day has been resolved No auto- remediation was configured. Which two reasons explain this change in alert status? (Choose two...

What is the behavior of Defenders when the Console is unreachable during upgrades?

A customer has a requirement to automatically protect all Lambda functions with runtime protection. What is the process to automatically protect all the Lambda functions?

You have onboarded a public cloud account into Prisma Cloud Enterprise Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts a...

Which statement is true regarding CloudFormation templates?

An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same...

A customer has a requirement to scan serverless functions for vulnerabilities. Which three settings are required to configure serverless scanning? (Choose three )

Which step is included when configuring Kubernetes to use Prisma Cloud Compute as an admission controller?

A S3 bucket within AWS has generated an alert by violating the Prisma Cloud Default policy "AWS S3 buckets are accessible to public" The policy definition follows: config where clo...

Which three Options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)

Drag and Drop Question Which order of steps map a policy to a custom compliance standard? (Drag the steps into the correct order of occurrence, from the first step to the last.) An...

Drag and Drop Question What is the order of steps to create a custom network policy? (Drag the steps into the correct order of occurrence, from the first step to the last.) Answer:

Drag and Drop Question You wish to create a custom policy with build and run subtypes. Match the query types for each example. (Select your answer from the pull-down list. Answers...

Drag and Drop Question Match the service on the right that evaluates each exposure type on the left. (Select your answer from the pull-down list. Answers may be used more than once...

Drag and Drop Question An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise. tenant-In w...

Drag and Drop Question Match the correct scanning mode for each given operation. (Select your answer from the pull-down list. Answers may be used more than once or not at all.) Ans...

Drag and Drop Question What is the order of steps in a Jenkins pipeline scan? (Drag the steps into the correct order of occurrence, from the first step to the last.) Answer:

Drag and Drop Question An administrator needs to write a script that automatically deactivates access keys that have not been used for 30 days In which order should the API calls b...

Drag and Drop Question Order the steps involved in onboarding an AWS Account for use with Data Security feature. Answer:

An organization that uses a private cloud in a black site that has no internet connection can use which product?

You type this query: event where user = 'root'. Where would the events you see originate?

Can Defender upgrades be restricted to a specific window of time?

Which two statements are true about the differences between build and run config policies? (Choose two.)

Which component(s), if any will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?

Which type of compliance check is available for rules under Defend > Compliance > Containers and Images > CI?

A customer wants to scan a serverless function as part of a build process. Which twistcli command can be used to scan serverless functions?