PCCSE practice questions 91–100

1. Question 91 · 242 in bank

   Select 2

   Which two bot categories belong to unknown bots under Web-Application and API Security (WAAS) bot protection? (Choose two.)

   • ANews bots
   • BSearch engine crawlers
   • CWeb scrapers
   • DHTTP libraries

   Show answer

   Answer: CD

   References

   • docs.paloaltonetworks.com documentation

   Next question

2. Question 92 · 242 in bank

   Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

   • Aconfig from network where api.name = ‘aws-iam-get-credential-report’ AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"
   • Bconfig from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"
   • Cconfig from cloud.resource where api.name = 'aws-iam-get-credential-report’ AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"
   • Dconfig where api.name = ‘aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals “true”

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation

   Next question

3. Question 93 · 242 in bank

   Select 3

   In WAAS Access control file upload controls, which three file types are supported out of the box? (Choose three.)

   • AText
   • BImages
   • CAudio
   • DDocuments
   • EJournal

   Show answer

   Answer: BCD

   Explanation

   BCD Built-in support is provided for the following file types: Audio: aac, mp3, wav. Compressed archives: 7zip, gzip, rar, zip. Documents: odf, pdf, Microsoft Office (legacy, Ooxml). Images: bmp, gif, ico, jpeg, png. Video: avi, mp4.

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 94 · 242 in bank

   Select 2

   What are two built-in RBAC permission groups for Prisma Cloud? (Choose two.)

   • AGroup Membership Admin
   • BGroup Admin
   • CAccount Group Admin
   • DAccount Group Read Only

   Show answer

   Answer: CD

   Explanation

   C Account Group Admin—Read/write permissions for the cloud accounts and account groups to which they are granted access. D Account Group Read Only—Read only permissions to view designated sections of Prisma Cloud. This role does not have permissions to modify any settings.

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

5. Question 95 · 242 in bank

   Which role does Prisma Cloud play when configuring SSO?

   • AJIT
   • BService provider
   • CSAML
   • DIdentity provider issuer

   Show answer

   Answer: B

   Explanation

   Palo Alto Tech Docs: To secure administrator access to Prisma Cloud, set up OneLogin as an IdP and then configure Prisma Cloud as SP for SSO. SP is Service Provider. So B is correct.

   Source: Adapted from community discussion — Redrum702

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 96 · 242 in bank

   Which Defender type performs registry scanning?

   • AServerless
   • BContainer
   • CHost
   • DRASP

   Show answer

   Answer: B

   Explanation

   B Any Container Defender running on a host with the Docker Engine container runtime or container runtime interface (CRI) can scan a registry, and any number of them can simultaneously operate as registry scanners. This flexibility gives you a lot of options when trying to determine how to cover disparate environments. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/vulnerability_management/registry_scanning/configure_registry_scanning

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

7. Question 97 · 242 in bank

   The exclamation mark on the resource explorer page would represent?

   • Aresource has been deleted
   • Bthe resource was modified recently
   • Cresource has alerts
   • Dresource has compliance violation

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation

   Next question

8. Question 98 · 242 in bank

   Where are Top Critical CVEs for deployed images found?

   • ADefend → Vulnerabilities → Code Repositories
   • BDefend → Vulnerabilities → Images
   • CMonitor → Vulnerabilities → Vulnerabilities Explorer
   • DMonitor → Vulnerabilities → Images

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

9. Question 99 · 242 in bank

   Which option identifies the Prisma Cloud Compute Edition?

   • APackage installed with APT
   • BDownloadable, self-hosted software
   • CSoftware-as-a-Service (SaaS)
   • DPlugin to Prisma Cloud

   Show answer

   Answer: B

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/welcome/pcee_vs_pcce.html

   References

   • docs.paloaltonetworks.com documentation

   Next question

10. Question 100 · 242 in bank

    Which categories does the Adoption Advisor use to measure adoption progress for Cloud Security Posture Management?

    • AVisibility, Compliance, Governance, and Threat Detection and Response
    • BNetwork, Anomaly, and Audit Event
    • CVisibility, Security, and Compliance
    • DFoundations, Advanced, and Optimize

    Show answer

    Answer: A

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 91. 242 questions available.