PCCSE practice questions 101–110

1. Question 101 · 242 in bank

   Select 3

   What are the three states of the Container Runtime Model? (Choose three.)

   • AInitiating
   • BLearning
   • CActive
   • DRunning
   • EArchived

   Show answer

   Answer: BCE

   Explanation

   BCE Models are built from both static analysis (such as building a hashed process map based on parsing an init script in a Dockerfile ENTRYPOINT) and dynamic behavioral analysis (such as observing actual process activity during early runtime of the container). Models can be in one of 3 modes: Active, Archived, or Learning.

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

2. Question 102 · 242 in bank

   What must be created in order to receive notifications about alerts generated when the operator is away from the Prisma Cloud Console?

   • AAlarm rule
   • BNotification rule
   • CAlert rule
   • DOffline alert

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation

   Next question

3. Question 103 · 242 in bank

   Which alerts are fixed by enablement of automated remediation?

   • AAll applicable open alerts regardless of when they were generated, with alert status updated to "resolved"
   • BOnly the open alerts that were generated before the enablement of remediation, with alert status updated to "resolved"
   • CAll applicable open alerts regardless of when they were generated, with alert status updated to "dismissed"
   • DOnly the open alerts that were generated after the enablement of remediation, with alert status updated to "resolved"

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 104 · 242 in bank

   Select 2

   Which two statements apply to the Defender type Container Defender - Linux?

   • AIt is implemented as runtime protection in the userspace.
   • BIt is deployed as a service.
   • CIt is deployed as a container.
   • DIt is incapable of filesystem runtime defense.

   Show answer

   Answer: AC

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

5. Question 105 · 242 in bank

   Which field is required during the creation of a custom config query?

   • Aresource status
   • Bapi.name
   • Cfinding.type
   • Dcloud.type

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

6. Question 106 · 242 in bank

   Which role must be assigned to DevOps users who need access to deploy Container and Host Defenders in Compute?

   • ACloud Provisioning Admin
   • BBuild and Deploy Security
   • CSystem Admin
   • DDeveloper

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

7. Question 107 · 242 in bank

   Select 2

   Which three serverless runtimes are supported by Prisma Cloud for vulnerability and compliance scans? (Choose three.)

   • ASwift
   • BPython
   • CDart
   • DJava
   • ENode.js

   Show answer

   Answer: BD

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

8. Question 108 · 242 in bank

   Select 2

   Which two attributes are required for a custom config RQL? (Choose two.)

   • Ajson.rule
   • Bcloud.account
   • Capi.name
   • Dtag

   Show answer

   Answer: BC

   Explanation

   BC config from cloud.resource where cloud.account config from cloud.resource where api.name https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/config-query/config-query-attributes or AC Config queries require some mandatory attributes. It should begin with config where cloud.resource where and at a minimum have api.name in conjunction with json.rule or it can have an attribute from completion suggestions, or it can have two api.name attributes with a filter attribute. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

9. Question 109 · 242 in bank

   Which type of query is used for scanning Infrastructure as Code (laC) templates?

   • AAPI
   • BXML
   • CJSON
   • DRQL

   Show answer

   Answer: C

   Next question

10. Question 110 · 242 in bank

    Which container scan is constructed correctly?

    • Atwistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 --container myimage/latest
    • Btwistcli images scan --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
    • Ctwistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 --details myimage/latest
    • Dtwistcli images scan -u api -p api --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest

    Show answer

    Answer: C

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 101. 242 questions available.