PCCSE practice questions 121–130

1. Question 121 · 242 in bank

   The security team wants to protect a web application container from an SQLi attack. Which type of policy should the administrator create to protect the container?

   • ACNAF
   • BRuntime
   • CCompliance
   • DCNNF

   Show answer

   Answer: A

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/20-09/prisma-cloud-compute-edition-admin/firewalls/waas

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

2. Question 122 · 242 in bank

   Creation of a new custom compliance standard that is based on other individual custom compliance standards needs to be automated. Assuming the necessary data from other standards has been collected, which API order should be used for this new compliance standard?

   • A1) https://api.prismacloud.io/compliance/add 2) https://api.prismacloud.io/compliance/requirementld/section 3) https://api.prismacloud.io/compliance/complianceld/requirement
   • B1) https://api.prismacloud.io/compliance 2) https://api.prismacloud.io/compliance/complianceld/requirement 3) https://api.prismacloud.io/compliance/requirementld/section
   • C1) https://api.prismacloud.io/compliance/add 2) https://api.prismacloud.io/compliance/complianceld/requirement 3) https://api.prismacloud.io/compliance/requirementld/section
   • D1) https://api.prismacloud.io/compliance 2) https://api.prismacloud.io/compliance/requirementld/section 3) https://api.prismacloud.io/compliance/complianceld/requirement

   Show answer

   Answer: B

   Next question

3. Question 123 · 242 in bank

   Which of the following is a reason for alert dismissal?

   • ASNOOZED_AUTO_CLOSE
   • BALERT_RULE_ADDED
   • CPOLICY_UPDATED
   • DUSER_DELETED

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 124 · 242 in bank

   A customer's Security Operations Center (SOC) team wants to receive alerts from Prisma Cloud via email once a day about all policies that have a violation, rather than receiving an alert every time a new violation occurs. Which alert rule configuration meets this requirement?

   • AConfigure an alert rule with all the defaults except selecting email within the "Alert Notifications" tab and specifying recipient.
   • BConfigure an alert rule. Under the "Policies" tab, select "High Risk Severity Policies." In the "Set Alert Notifications" tab, select "Email > Recurring," set to repeat every 1 day, and enable "Email."
   • CSet up email integrations under the "Integrations" tab in "Settings" and create a notification template.
   • DConfigure an alert rule. Under the "Policies" tab, select "All Policies." In the "Set Alert Notifications" tab, select "Email > Recurring," set to repeat every 1 day, and then enable "Email."

   Show answer

   Answer: D

   Next question

5. Question 125 · 242 in bank

   In which Console menu would an administrator verify whether a custom compliance check is failing or passing?

   • AMonitor > Compliance
   • BDefend > Compliance
   • CContainer Security > Compliance
   • DCustom > Compliance

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 126 · 242 in bank

   Select 3

   Which three Orchestrator types are supported when deploying Defender? (Choose three.)

   • ARed Hat OpenShift
   • BAmazon ECS
   • CDocker Swarm
   • DAzure ACS
   • EKubernetes

   Show answer

   Answer: ABE

   References

   • docs.paloaltonetworks.com documentation

   Next question

7. Question 127 · 242 in bank

   Select 3

   Which three platforms support the twistcli tool? (Choose three.)

   • ASolaris
   • BAndroid
   • CLinux
   • DMacOS
   • EWindows

   Show answer

   Answer: CDE

   Explanation

   CDE Prisma Cloud ships a command-line configuration and control tool known as twistcli. It is supported on Linux, macOS, and Windows. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/tools/twistcli

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

8. Question 128 · 242 in bank

   Select 3

   Which three options for hardening a customer environment against misconfiguration are included in Prisma Cloud Compute compliance enforcement for hosts? (Choose three.)

   • AServerless functions
   • BDocker daemon configuration
   • CCloud provider tags
   • DHost configuration
   • EHosts without Defender agents

   Show answer

   Answer: BDE

   Explanation

   BDE Prisma Cloud scans all hosts for compliance issues, provided that a defender is installed or the host is covered by an agentless scan. Among these, the following compliance issues are covered. -Host configuration -Docker daemon configuration https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/host_scanning

   Source: Adapted from community discussion — Jihe

   References

   • docs.paloaltonetworks.com documentation

   Next question

9. Question 129 · 242 in bank

   Taking which action will automatically enable all seventy levels?

   • ANavigate to Policies > Settings and enable all severity levels in the alarm center.
   • BNavigate to Settings > Enterprise Settings and enable all severity levels in the alarm center.
   • CNavigate to Policies > Settings and ensure all severity levels are checked under "auto-enable default policies."
   • DNavigate to Settings > Enterprise Settings and ensure all severity levels are checked under "auto-enable default policies."

   Show answer

   Answer: D

   Explanation

   D Step 1- To enable global settings for Prisma Cloud default policies click "Settings" and select "Enterprise Settings" Step 2- To enable policies based on severity, select Auto enable new default policies of the type—Critical, High, Medium, Low or Informational. and see the screenshot of Enterprise Settings, Auto-Enable Default Policies https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/manage-prisma-cloud-policies

   Source: Adapted from community discussion — Jihe

   References

   • docs.paloaltonetworks.com documentation

   Next question

10. Question 130 · 242 in bank

    Select 2

    Which two CI/CD plugins are supported by Prisma Cloud as part of its Code Security? (Choose two.)

    • ACheckov
    • BVisual Studio Code
    • CCircleCI
    • DIntelliJ

    Show answer

    Answer: AC

    References

    • live.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 121. 242 questions available.