PCCSE practice questions 201–210

1. Question 201 · 242 in bank

   Which container image scan is constructed correctly?

   • Atwistcli images scan --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
   • Btwistcli images scan --address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
   • Ctwistcli images scan --address https://us-west1.cloud.twistlock.com/us-3-123456789 --container myimage/latest
   • Dtwistcli images scan --address https://us-west1.cloud.twistlock.com/us-3-123456789 --container myimage/latest --details

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation

   Next question

2. Question 202 · 242 in bank

   Which statement is true about obtaining Console images for Prisma Cloud Compute Edition?

   • ATo retrieve Prisma Cloud Console images using basic auth: 1. Access registry.paloaltonetworks.com, and authenticate using 'docker login'. 2. Retrieve the Prisma Cloud Console images using 'docker pull'.
   • BTo retrieve Prisma Cloud Console images using basic auth: 1. Access registry.twistlock.com, and authenticate using 'docker login'. 2. Retrieve the Prisma Cloud Console images using 'docker pull'.
   • CTo retrieve Prisma Cloud Console images using URL auth: 1. Access registry-url-auth.twistlock.com, and authenticate using the user certificate. 2. Retrieve the Prisma Cloud Console images using 'docker pull'.
   • DTo retrieve Prisma Cloud Console images using URL auth: 1. Access registry-auth.twistlock.com, and authenticate using the user certificate. 2. Retrieve the Prisma Cloud Console images using 'docker pull'.

   Show answer

   Answer: B

   Explanation

   Reference: https://docs.twistlock.com/docs/compute_edition/install/twistlock_container_images.html#retrieving-prisma-cloud-images-using-basic-auth

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

3. Question 203 · 242 in bank

   DRAG DROP - An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise tenant. In which order will the APIs be executed for this service? (Drag the steps into the correct order of occurrence, from the first step to the last.) Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

4. Question 204 · 242 in bank

   Select 2

   Which two processes ensure that builds can function after a Console upgrade? (Choose two.)

   • Aallowing Jenkins to automatically update the plugin
   • Bupdating any build environments that have twistcli included to use the latest version
   • Cconfiguring build pipelines to download twistcli at the start of each build
   • Dcreating a new policy that allows older versions of twistcli to connect the Console

   Show answer

   Answer: BC

   References

   • docs.paloaltonetworks.com documentation

   Next question

5. Question 205 · 242 in bank

   The compliance team needs to associate Prisma Cloud policies with compliance frameworks. Which option should the team select to perform this task?

   • ACustom Compliance
   • BPolicies
   • CCompliance
   • DAlert Rules

   Show answer

   Answer: B

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/compliance-dashboard.html

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 206 · 242 in bank

   Review this admission control policy: match[{"msg": msg}] { input.request.operation == "CREATE" input.request.kind.kind == "Pod" input.request.resource.resource == "pods" input.request.object.spec.containers[_].securityContext.privileged msg := "Privileged" } Which response to this policy will be achieved when the effect is set to `block`?

   • AThe policy will block all pods on a Privileged host.
   • BThe policy will replace Defender with a privileged Defender.
   • CThe policy will alert only the administrator when a privileged pod is created.
   • DThe policy will block the creation of a privileged pod.

   Show answer

   Answer: D

   Explanation

   The question is mentioning about if the effect is set to "block" Which response to this policy will be achieved when the effect is set to `block`? Prevent will only terminates related process in container, otherwise block will block the resource creation. Answer is D

   Source: Adapted from community discussion — kemalgoklen

   Next question

7. Question 207 · 242 in bank

   Per security requirements, an administrator needs to provide a list of people who are receiving e-mails for Prisma Cloud alerts. Where can the administrator locate this list of e-mail recipients?

   • ATarget section within an Alert Rule.
   • BNotification Template section within Alerts.
   • CUsers section within Settings.
   • DSet Alert Notification section within an Alert Rule.

   Show answer

   Answer: D

   References

   • docs.paloaltonetworks.com documentation

   Next question

8. Question 208 · 242 in bank

   A customer wants to scan a serverless function as part of a build process. Which twistcli command can be used to scan serverless functions?

   • Atwistcli function scan <SERVERLESS_FUNCTION.ZIP>
   • Btwistcli scan serverless <SERVERLESS_FUNCTION.ZIP>
   • Ctwistcli serverless AWS <SERVERLESS_FUNCTION.ZIP>
   • Dtwiscli serverless scan <SERVERLESS_FUNCTION.ZIP>

   Show answer

   Answer: D

   Explanation

   D. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/vulnerability_management/serverless_functions You can also use the twistcli command line utility to scan your serverless functions. First download your serverless function as a ZIP file, then run: $ twistcli serverless scan

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

9. Question 209 · 242 in bank

   A customer has a development environment with 50 connected Defenders. A maintenance window is set for Monday to upgrade 30 stand-alone Defenders in the development environment, but there is no maintenance window available until Sunday to upgrade the remaining 20 stand-alone Defenders. Which recommended action manages this situation?

   • AGo to Manage > Defender > Manage, then click Defenders, and use the Scheduler to choose which Defenders will be automatically upgraded during the maintenance window.
   • BFind a maintenance window that is suitable to upgrade all stand-alone Defenders in the development environment.
   • CUpgrade a subset of the Defenders by clicking the individual Actions > Upgrade button in the row that corresponds to the Defender that should be upgraded during the maintenance window.
   • DOpen a support case with Palo Alto Networks to arrange an automatic upgrade.

   Show answer

   Answer: C

   Explanation

   A. Go to Manage > Defender > Manage, then click Defenders, and use the Scheduler to choose which Defenders will be automatically upgraded during the maintenance window.

   Source: Adapted from community discussion — Chichi23

   References

   • docs.paloaltonetworks.com documentation

   Next question

10. Question 210 · 242 in bank

    What is an example of an outbound notification within Prisma Cloud?

    • AAWS Inspector
    • BQualys
    • CTenable
    • DPagerDuty

    Show answer

    Answer: D

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 201. 242 questions available.