PCCSE practice questions 191–200

1. Question 191 · 242 in bank

   A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed. How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

   • Aset the Container model to manual relearn and set the default runtime rule to block for process protection.
   • Bset the Container model to relearn and set the default runtime rule to prevent for process protection.
   • Cadd a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list, and set the action to ג€preventג€.
   • Dchoose ג€copy into ruleג€ for the Container, add a ransomWare process into the denied process list, and set the action to ג€blockג€.

   Show answer

   Answer: D

   Explanation

   Option C is the correct answer. The administrator should add a new runtime policy targeted at a specific Container name, add the ransomWare process into the denied process list, and set the action to "prevent". This will prevent the ransomWare process from being executed in the Container image topSecret:latest.

   Source: Adapted from community discussion — NodummyIQ

   References

   • docs.paloaltonetworks.com documentation

   Next question

2. Question 192 · 242 in bank

   DRAG DROP - Order the steps involved in onboarding an AWS Account for use with Data Security feature. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

3. Question 193 · 242 in bank

   Select 3

   A customer has a requirement to scan serverless functions for vulnerabilities. Which three settings are required to configure serverless scanning? (Choose three.)

   • ADefender Name
   • BRegion
   • CCredential
   • DConsole Address
   • EProvider

   Show answer

   Answer: BCE

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/21-04/prisma-cloud-compute-edition-admin/vulnerability_management/ serverless_functions.html

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 194 · 242 in bank

   You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is necessary to complete this policy?

   • AYAML
   • BJSON
   • CCloudFormation
   • DTerraform

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation

   Next question

5. Question 195 · 242 in bank

   You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account. Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully. Why are no alerts being generated?

   • AThe public cloud account is not associated with an alert notification.
   • BThe public cloud account does not have audit trail ingestion enabled.
   • CThe public cloud account does not access to configuration resources.
   • DThe public cloud account is not associated with an alert rule.

   Show answer

   Answer: D

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 196 · 242 in bank

   The security team wants to target a CNAF policy for specific running Containers. How should the administrator scope the policy to target the Containers?

   • Ascope the policy to Image names.
   • Bscope the policy to namespaces.
   • Cscope the policy to Defender names.
   • Dscope the policy to Host names.

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

7. Question 197 · 242 in bank

   The InfoSec team wants to be notified via email each time a Security Group is misconfigured. Which Prisma Cloud tab should you choose to complete this request?

   • ANotifications
   • BPolicies
   • CAlert Rules
   • DEvents

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

8. Question 198 · 242 in bank

   An administrator has access to a Prisma Cloud Enterprise. What are the steps to deploy a single container Defender on an ec2 node?

   • APull the Defender image to the ec2 node, copy and execute the curl | bash script, and start the Defender to ensure it is running.
   • BExecute the curl | bash script on the ec2 node.
   • CConfigure the cloud credential in the console and allow cloud discovery to auto-protect the ec2 node.
   • DGenerate DaemonSet file and apply DaemonSet to the twistlock namespace.

   Show answer

   Answer: B

   Explanation

   I would say option A: To deploy a single container Defender on an EC2 node, you can follow these steps: Log in to the Prisma Cloud Enterprise console and navigate to the "Defenders" tab. Click on the "Add Defender" button in the top right corner of the page. Select "Single Container" from the list of Defender types. Configure the Defender settings as follows: Enter a name for the Defender. Choose the appropriate OS type for the EC2 instance. Select the "Download Script" option to generate a script that will download and run the Defender container image. Choose the runtime environment for the container (Docker or Kubernetes). Copy the script that is generated. SSH into the EC2 instance where you want to deploy the Defender. Run the script to download and run the Defender container image. Verify that the Defender is running by going back to the "Defenders" tab in the Prisma Cloud Enterprise console and checking the status of the Defender you just deployed. That's it! The single container Defender should now be deployed and protecting your EC2 instance.

   Source: Adapted from community discussion — Chichi23

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

9. Question 199 · 242 in bank

   A customer wants to turn on Auto Remediation. Which policy type has the built-in CLI command for remediation?

   • AAnomaly
   • BAudit Event
   • CNetwork
   • DConfig

   Show answer

   Answer: D

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy.html

   References

   • live.paloaltonetworks.com documentation

   Next question

10. Question 200 · 242 in bank

    A customer is deploying Defenders to a Fargate environment. It wants to understand the vulnerabilities in the image it is deploying. How should the customer automate vulnerability scanning for images deployed to Fargate?

    • ASet up a vulnerability scanner on the registry
    • BEmbed a Fargate Defender to automatically scan for vulnerabilities
    • CDesignate a Fargate Defender to serve a dedicated image scanner
    • DUse Cloud Compliance to identify misconfigured AWS accounts

    Show answer

    Answer: B

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 191. 242 questions available.