Prisma Certified Cloud Security Engineer242 questions across 25 pages are complete and free, with no account or card.
242 questions in this bank
Free access · progress saved on this device
Which type of compliance check is available for rules under Defend > Compliance > Containers and Images > CI?
Answer: D
D --> CI images compliance policy. Compliance rules let you monitor, audit, and enforce security and configuration settings for your CI images.
Source: Adapted from community discussion — Spippolo
Which RQL will trigger the following audit event activity?
Answer: A
Which report includes an executive summary and a list of policy violations, including a page with details for each policy?
Answer: C
C The Cloud Security Assessment report is a PDF report that summarizes the risks from open alerts in the monitored cloud accounts for a specific cloud type. The report includes an executive summary and a list of policy violations, including a page with details for each policy that includes the description and the compliance standards that are associated with it, the number of resources that passed and failed the check within the specified time period. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/generate-reports-on-prisma-cloud-alerts
Source: Adapted from community discussion — Spippolo
Prisma Cloud Compute has been installed on Onebox. After Prisma Cloud Console has been accessed. Defender is disconnected and keeps returning the error "No console connectivity" in the logs. What could be causing the disconnection between Console and Defender in this scenario?
Answer: D
D By default Prisma Cloud listens on: 8083 HTTPS management port for access to Console. 8084 WSS port for Defender to Console communication.
Source: Adapted from community discussion — Spippolo
A customer wants to monitor its Amazon Web Services (AWS) accounts via Prisma Cloud, but only needs the resource configuration to be monitored at present. Which two pieces of information are needed to onboard this account? (Choose two.)
Answer: BD
Which policy type should be used to detect and alert on cryptominer network activity?
Answer: A
A Suspicious network actors—Exposes suspicious connections by inspecting the network traffic to and from your cloud environment and correlating it with AutoFocus, Palo Alto Networks threat intelligence feed. AutoFocus identifies IP addresses involved in suspicious or malicious activity and classifies them into one of eighteen categories. Some examples of the categories are Backdoor, Botnet, Cryptominer, DDoS, Ransomware, Rootkit, and Worm. There are thirty-six policies, two for each of the eighteen categories—internal and external. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies
Source: Adapted from community discussion — Spippolo
Given the following information, which twistcli command should be run if an administrator were to exec into a running container and scan it from within using an access token for authentication? • Console is located at https://prisma-console.mydomain.local • Token is: TOKEN_VALUE • Report ID is: REPORT_ID • Container image running is: myimage:latest
Answer: C
C $ docker run \ -v /PATH/TO/TWISTCLI_DIR:/tools \ -e TW_TOKEN= \ -e TW_CONSOLE= \ --entrypoint="" \ \ /tools/twistcli images scan \ --containerized \ --details \ --address $TW_CONSOLE \ --token $TW_TOKEN \ https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/tools/twistcli_scan_images
Source: Adapted from community discussion — Spippolo
Prisma Cloud supports which three external systems that allow the import of vulnerabilities and provide additional context on risks in the cloud? (Choose three.)
Answer: BCD
BCD Similarly, Prisma Cloud integration with external systems such as Amazon GuardDuty, AWS Inspector, Qualys, and Tenable allow you to import vulnerabilities and provide additional context on risks in the cloud. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrations-on-prisma-cloud
Source: Adapted from community discussion — Spippolo
Which two statements explain differences between build and run config policies? (Choose two.)
Answer: BD
BD The Run policies monitor resources and check for potential issues once these cloud resources are deployed Build policies enable you to check for security misconfigurations in the IaC templates and ensure that these issues do not make their way into production. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy
Source: Adapted from community discussion — Spippolo
Which two integrated development environment (IDE) plugins are supported by Prisma Cloud as part of its Code Security? (Choose two.)
Answer: BD
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCCSE practice, question 111. 242 questions available.
Version 1.0.0. How we source questions