PCCSE Practice Questions

An administrator needs to detect and alert on any activities performed by a root account. Which policy type should be used?

One of the resources on the network has triggered an alert for a Default Config policy. Given the following resource JSON snippet: Which RQL detected the vulnerability? A. B. C. D.

A customer has multiple violations in the environment including: - User namespace is enabled - An LDAP server is enabled - SSH root is enabled Which section of Console should the a...

A customer has serverless functions that are deployed in multiple clouds. Which serverless cloud provider is covered be "overly permissive service access" compliance check?

How should the administrator configure Prisma Cloud Compute to satisfy this requirement? Container policy and set the policy effect to alert. the effect to block. set the effect to...

Which API calls can scan an image named myimage: latest with twistcli and then retrieve the results from Console?

Given the following RQL: event from cloud.audit_logs where operation IN (`CreateCryptoKey', `DestroyCryptoKeyVersion', `v1.compute.disks.createSnapshot') Which audit event snippet...

Which two of the following are required to be entered on the IdP side when setting up SSO in Prisma Cloud? (Choose two.)

An administrator sees that a runtime audit has been generated for a container. The audit message is: "/bin/ls launched and is explicitly blocked in the runtime rule. Full command:...

Which data security default policy is able to scan for vulnerabilities?

Given the following audit event activity snippet: Which RQL will be triggered by the audit event? A. B. C. D.

Which three fields are mandatory when authenticating the Prisma Cloud plugin in the IntelliJ application? (Choose three.)

Which of the following are correct statements regarding the use of access keys? (Choose two.)

Given the following RQL: Which audit event snippet is identified by the RQL? A. B. C. D.

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall. Which type of policy should be created to protect t...

A manager informs the SOC that one or more RDS instances have been compromised and the SOC needs to make sure production RDS instances are NOT publicly accessible. Which action sho...

An administrator wants to enforce a rate limit for users not being able to post five (5) .tar.gz files within five (5) seconds. What does the administrator need to configure?

What is an automatically correlated set of individual events generated by the firewall and runtime sensors to identify unfolding attacks?

A customer wants to monitor the company's AWS accounts via Prisma Cloud, but only needs the resource configuration to be monitored for now. Which two pieces of information do you n...

An administrator for Prisma Cloud needs to obtain a graphical view to monitor all connections, including connections across hosts and connections to any configured network objects....

Which two fields are required to configure SSO in Prisma Cloud? (Choose two.)

Which two IDE plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.)

Which two CI/CD plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.).

Given the following JSON query: $.resource[*].aws_s3_bucket exists Which tab is the correct place to add the JSON query when creating a Config policy?

Which two attributes of policies can be fetched using API? (Choose two.)

Which two options may be used to upgrade the Defenders with a Console v20.04 and Kubernetes deployment? (Choose two.)

A customer has a requirement to scan serverless functions for vulnerabilities. What is the correct option to configure scanning?

An administrator has been tasked with a requirement by your DevSecOps team to write a script to continuously query programmatically the existing users, and the user's associated pe...

When would a policy apply if the policy is set under Defend > Vulnerability > Images > Deployed?

Which two required request headers interface with Prisma Cloud API? (Choose two.)

An administrator has a requirement to ingest all Console and Defender logs to Splunk. Which option will satisfy this requirement in Prisma Cloud Compute?

The security team wants to enable the "block" option under compliance checks on the host. What effect will this option have if it violates the compliance check?

During an initial deployment of Prisma Cloud Compute, the customer sees vulnerabilities in their environment. Which statement correctly describes the default vulnerability policy?

Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster. Which option shows the steps to deploy the Defenders in Kubernetes using...

Drag and Drop Question Put the steps involved to configure and scan using the IntelliJ plugin in the correct order. Answer:

Drag and Drop Question Move the steps to the correct order to set up and execute a serverless scan using AWS DevOps. Answer:

Which two attributes are required for a custom config RQL? (Choose two.)

Which type of query is used for scanning Infrastructure as Code (laC) templates?

Which RQL query type is invalid?

On which cloud service providers can you receive new API release information for Prisma Cloud?

Web-Application and API Security (WAAS) provides protection for which two protocols? (Choose two.)

What is the most reliable and extensive source for documentation on Prisma Cloud APIs?

How often do Defenders share logs with Console?

In Prisma Cloud Software Release 22.06 (Kepler), which Registry type is added?

Which three elements are part of SSH Events in Host Observations? (Choose three.)

Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in the Amazon Web Services (AWS) Cloud? (Choose two.)

Which three actions are required in order to use the automated method within Azure Cloud to streamline the process of using remediation in the identity and access management (IAM)...

Which two roles have access to view the Prisma Cloud policies? (Choose two.)

An administrator has added a Cloud account on Prisma Cloud and then deleted it. What will happen if the deleted account is added back on Prisma Cloud within a 24-hour period?

In which two ways can Prisma Cloud images be retrieved in Prisma Cloud Compute Self-Hosted Edition? (Choose two.)