PCCSE practice questions 181–190

1. Question 181 · 242 in bank

   DRAG DROP - An administrator needs to write a script that automatically deactivates access keys that have not been used for 30 days. In which order should the API calls be used to accomplish this task? (Drag the steps into the correct order from the first step to the last.) Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The correct order seems to be: POST > GET > PATCH 1) POST as shown in Step 1 (doc below) Authenticate to obtain a JWT: --request POST \ 'https://api.prismacloud.io/login' 2) GET (access keys) 3) PATCH (Update or Patch access_keys/status https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/get-started-with-prisma-cloud/access-the-prisma-cloud-api

   Source: Adapted from community discussion — Jihe

   References

   • docs.paloaltonetworks.com documentation

   

   Next question

2. Question 182 · 242 in bank

   Which method should be used to authenticate to Prisma Cloud Enterprise programmatically?

   • Asingle sign-on
   • BSAML
   • Cbasic authentication
   • Daccess key

   Show answer

   Answer: D

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/get-started-with-prisma-cloud/access-the-prisma-cloud-api.html

   References

   • docs.paloaltonetworks.com documentation

   Next question

3. Question 183 · 242 in bank

   Which option shows the steps to install the Console in a Kubernetes Cluster?

   • ADownload the Console and Defender image Generate YAML for Defender Deploy Defender YAML using kubectl
   • BDownload and extract release tarball Generate YAML for Console Deploy Console YAML using kubectl
   • CDownload the Console and Defender image Download YAML for Defender from the document site Deploy Defender YAML using kubectl
   • DDownload and extract release tarball Download the YAML for Console Deploy Console YAML using kubectl

   Show answer

   Answer: B

   Explanation

   Download and extract the release tarball of Prisma Cloud Console. Generate the YAML configuration file for the Console. Deploy the Console YAML configuration file using kubectl command to apply the configuration to the Kubernetes cluster.

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 184 · 242 in bank

   A customer has a requirement to automatically protect all Lambda functions with runtime protection. What is the process to automatically protect all the Lambda functions?

   • AConfigure a function scan policy from the Defend/Vulnerabilities/Functions page.
   • BConfigure serverless radar from the Defend/Compliance/Cloud Platforms page.
   • CConfigure a manually embedded Lambda Defender.
   • DConfigure a serverless auto-protect rule for the functions.

   Show answer

   Answer: D

   Explanation

   Reference: https://blog.paloaltonetworks.com/prisma-cloud/protect-serverless-functions/

   References

   • docs.paloaltonetworks.com documentation

   Next question

5. Question 185 · 242 in bank

   Which statement accurately characterizes SSO Integration on Prisma Cloud?

   • APrisma Cloud supports IdP initiated SSO, and its SAML endpoint supports the POST and GET methods.
   • BOkta, Azure Active Directory, PingID, and others are supported via SAML.
   • CAn administrator can configure different Identity Providers (IdP) for all the cloud accounts that Prisma Cloud monitors.
   • DAn administrator who needs to access the Prisma Cloud API can use SSO after configuration.

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 186 · 242 in bank

   DRAG DROP - Match the service on the right that evaluates each exposure type on the left. (Select your answer from the pull-down list. Answers may be used more than once or not at all.) Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.paloaltonetworks.com/prisma/cloud/cloud-data-security

   

   Next question

7. Question 187 · 242 in bank

   Select 2

   What are two ways to scan container images in Jenkins pipelines? (Choose two.)

   • Atwistcli
   • BJenkins Docker plugin
   • CCompute Jenkins plugin
   • DCompute Azure DevOps plugin
   • EPrisma Cloud Visual Studio Code plugin with Jenkins integration

   Show answer

   Answer: AC

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

8. Question 188 · 242 in bank

   Select 3

   A customer wants to harden its environment from misconfiguration. Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

   • ADocker daemon configuration files
   • BDocker daemon configuration
   • CHost cloud provider tags
   • DHost configuration
   • EHosts without Defender agents

   Show answer

   Answer: ABD

   Explanation

   https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/host_scanning Host configuration: Compliance issues in the host setup. Docker daemon configuration: Compliance issues that stem from misconfiguring your Docker daemons. Docker daemon derives its configuration from various files, including /etc/sysconfig/docker or /etc/default/docker. Misconfigured daemons affect all container instances on a host. Docker daemon configuration files: Compliance issues that arise from improperly securing critical configuration files with the correct permissions.

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

9. Question 189 · 242 in bank

   A Prisma Cloud administrator is tasked with pulling a report via API. The Prisma Cloud tenant is located on app2.prismacloud.io. What is the correct API endpoint?

   • Ahttps://api.prismacloud.io
   • Bhttps://api2.eu.prismacloud.io
   • Chttsp://api.prismacloud.cn
   • Dhttps://api2.prismacloud.io

   Show answer

   Answer: D

   Next question

10. Question 190 · 242 in bank

    A customer has Defenders connected to Prisma Cloud Enterprise. The Defenders are deployed as a DaemonSet in OpenShift. How should the administrator get a report of vulnerabilities on hosts?

    • ANavigate to Monitor > Vulnerabilities > CVE Viewer
    • BNavigate to Defend > Vulnerabilities > VM Images
    • CNavigate to Defend > Vulnerabilities > Hosts
    • DNavigate to Monitor > Vulnerabilities > Hosts

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 181. 242 questions available.