PCCSE practice questions 141–150

1. Question 141 · 242 in bank

   A Systems Engineer is the administrator of a self-hosted Prisma Cloud console. They upgraded the console to the latest version. However, after the upgrade, the console does not show all the policies configured. Before they upgraded the console, they created a backup manually and exported it to a local drive. Now they have to install a Prisma Cloud to restore from the backup that they manually created. Which Prisma Cloud version can they can restore with the backup?

   • AAny version of Prisma Cloud Self-Hosted Console
   • BThe same version of the Prisma Cloud Self-Hosted Console that the backup created
   • CUp to N-2 versions of the Prisma Cloud Self-Hosted Console that the backup created
   • DThe latest version of Prisma Cloud Self-Hosted Console

   Show answer

   Answer: B

   Explanation

   You can only restore Console from a backup file whose version exactly matches the current running version of Console. https://docs.prismacloud.io/en/compute-edition/32/admin-guide/configure/disaster-recovery

   Source: Adapted from community discussion — piipo

   Next question

2. Question 142 · 242 in bank

   Which statement applies to Adoption Advisor?

   • AIt helps adopt security capabilities at a fixed pace regardless of the organization's needs.
   • BIt is only available for organizations that have completed the cloud adoption journey.
   • CIt only provides guidance during the deploy phase of the application lifecycle.
   • DIt includes security capabilities from subscriptions for CSPM, CWP, CCS, CIEM, and Data Security.

   Show answer

   Answer: D

   Next question

3. Question 143 · 242 in bank

   DRAG DROP - Which order of steps map a policy to a custom compliance standard? (Drag the steps into the correct order of occurrence, from the first step to the last.) Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1. click on compliance standard. 2. add custom compliance standard. 3. edit policies. 4. add compliance standard from drop-down menu

   Source: Adapted from community discussion — [Removed]

   References

   • docs.paloaltonetworks.com documentation

   

   Next question

4. Question 144 · 242 in bank

   Which resources can be added in scope while creating a vulnerability policy for continuous integration?

   • AImages and cluster
   • BImages and labels
   • CImages and containers
   • DLabels and AccountID

   Show answer

   Answer: B

   Next question

5. Question 145 · 242 in bank

   A container and image compliance rule has been configured by enabling all checks; however, upon review, the container's compliance view reveals only the entries in the image below.

   

   What is the appropriate action to take next?

   • ADeploy defenders to scan complete container compliance.
   • BChange the rule options to list both failed and passed checks in the compliance rule edit window.
   • CWait until Prisma Cloud finishes the compliance scan and recheck.
   • DChange the rule options to list only failed checks in the compliance rule edit window.

   Show answer

   Answer: B

   Next question

6. Question 146 · 242 in bank

   What is the primary purpose of Prisma Cloud Code Security?

   • ATo address cloud infrastructure misconfigurations in code before they become alerts or incidents
   • BTo provide a platform for developers to create custom security policies for applications
   • CTo offer instant feedback on application performance issues and bottlenecks
   • DTo triage alerts and incidents in realtime during deployment

   Show answer

   Answer: A

   Next question

7. Question 147 · 242 in bank

   How does assigning an account group to an administrative user on Prisma Cloud help restrict access to resources?

   • AIt restricts access to all resources and data within the cloud account.
   • BIt restricts access only to certain types of resources within the cloud account.
   • CIt restricts access only to the resources and data that pertains to the cloud account(s) within an account group.
   • DIt does not restrict access to any resources within the cloud account.

   Show answer

   Answer: C

   Next question

8. Question 148 · 242 in bank

   Select 3

   Which three AWS policy types and identities are used to calculate the net effective permissions? (Choose three.)

   • AAWS IAM group
   • BAWS IAM role
   • CAWS service control policies (SCPs)
   • DAWS IAM tag policy
   • EAWS IAM User

   Show answer

   Answer: ABC

   Explanation

   AWS IAM role AWS IAM policy AWS IAM group AWS service control policies (SCPs) Role trust relationships Permission boundaries NotAction Policies with wild card support

   Source: Adapted from community discussion — piipo

   Next question

9. Question 149 · 242 in bank

   Based on the following information, which RQL query will satisfy the requirement to identify VM hosts deployed to organization public cloud environments exposed to network traffic from the internet and affected by Text4Shell RCE (CVE-2022-42889) vulnerability? • Network flow logs from all virtual private cloud (VPC) subnets are ingested to the Prisma Cloud Enterprise Edition tenant. • All virtual machines (VMs) have Prisma Cloud Defender deployed.

   • Anetwork from vpc.flow_record where bytes > 0 AND dest.resource IN (resource where finding.type IN ('Host Vulnerability') AND finding.source IN ('Prisma Cloud') AND finding.name IN ('CVE-2022-42889')) AND source.publicnetwork IN ('Internet IPs', 'Suspicious IPs')
   • Bconfig from vpc.flow_record where bytes > 0 AND dest.resource IN (resource where finding.type IN ('Host Vulnerability') AND finding.source IN ('Prisma Cloud') AND finding.name IN ('CVE-2022-42889')) AND source.publicnetwork = ('Internet IPs' or 'Suspicious IPs')
   • Cnetwork from vpc.flow_record where bytes > 0 AND finding.type IN ('Host Vulnerability') AND finding.source IN ('Prisma Cloud') AND finding.name IN ('CVE-2022-42889') AND source.publicnetwork = 'Internet IPs'
   • Dconfig from cloud.resource where cloud.type = 'aws' AND api.name = 'aws-ec2-describe-instances' AND json.rule = publicIpAddress exists AND finding.type IN ('Host Vulnerability') AND finding.source IN ('Prisma Cloud') AND finding.name IN ('CVE-2022-42889')

   Show answer

   Answer: A

   References

   • live.paloaltonetworks.com documentation

   Next question

10. Question 150 · 242 in bank

    Which of the following is not a supported external integration for receiving Prisma Cloud Code Security notifications?

    • AServiceNow
    • BSplunk
    • CMicrosoft Teams
    • DCortex XSOAR

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 141. 242 questions available.