PCCSE practice questions 211–220

1. Question 211 · 242 in bank

   Select 2

   A security team has been asked to create a custom policy. Which two methods can the team use to accomplish this goal? (Choose two.)

   • Aadd a new policy
   • Bclone an existing policy
   • Cdisable an out-of-the-box policy
   • Dedit the query in the out-of-the-box policy

   Show answer

   Answer: AB

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/manage-prisma-cloud-policies

   Next question

2. Question 212 · 242 in bank

   The security auditors need to ensure that given compliance checks are being run on the host. Which option is a valid host compliance policy?

   • AEnsure functions are not overly permissive.
   • BEnsure host devices are not directly exposed to containers.
   • CEnsure images are created with a non-root user.
   • DEnsure compliant Docker daemon configuration.

   Show answer

   Answer: D

   Next question

3. Question 213 · 242 in bank

   Select 2

   Which two statements are true about the differences between build and run config policies? (Choose two.)

   • ARun and Network policies belong to the configuration policy set.
   • BBuild and Audit Events policies belong to the configuration policy set.
   • CRun policies monitor resources, and check for potential issues after these cloud resources are deployed.
   • DBuild policies enable you to check for security misconfigurations in the IaC templates and ensure that these issues do not get into production.
   • ERun policies monitor network activities in your environment, and check for potential issues during runtime.

   Show answer

   Answer: CD

   Explanation

   Config—Configuration policies monitor your resource configurations for potential policy violations. Configuration policies on Prisma Cloud can be of two sub-types—Build and Run—to enable a layered approach. Build policies enable you to check for security misconfigurations in the IaC templates and ensure that these issues do not make their way into production (D). The Run policies monitor resources and check for potential issues once these cloud resources are deployed (C). See Create a Configuration Policy.

   Source: Adapted from community discussion — peqwilber

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 214 · 242 in bank

   A customer wants to be notified about port scanning network activities in their environment. Which policy type detects this behavior?

   • ANetwork
   • BPort Scan
   • CAnomaly
   • DConfig

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

5. Question 215 · 242 in bank

   A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80. Which port should the team specify in the CNAF rule to protect the application?

   • A443
   • B80
   • C8080
   • D8888

   Show answer

   Answer: C

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/19-11/prisma-cloud-compute-edition-admin/firewalls/deploy_cnaf.html

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 216 · 242 in bank

   Select 3

   Which three types of buckets exposure are available in the Data Security module? (Choose three.)

   • APublic
   • BPrivate
   • CInternational
   • DDifferential
   • EConditional

   Show answer

   Answer: ABE

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

7. Question 217 · 242 in bank

   The administrator wants to review the Console audit logs from within the Console. Which page in the Console should the administrator use to review this data, if it can be reviewed at all?

   • ANavigate to Monitor > Events > Host Log Inspection
   • BThe audit logs can be viewed only externally to the Console
   • CNavigate to Manage > Defenders > View Logs
   • DNavigate to Manage > View Logs > History

   Show answer

   Answer: D

   Explanation

   Reference: https://docs.twistlock.com/docs/compute_edition/howto/review_debug_logs.html

   References

   • docs.paloaltonetworks.com documentation

   Next question

8. Question 218 · 242 in bank

   DRAG DROP - What is the order of steps in a Jenkins pipeline scan? (Drag the steps into the correct order of occurrence, from the first step to the last.) Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

9. Question 219 · 242 in bank

   DRAG DROP - What is the order of steps to create a custom network policy? (Drag the steps into the correct order of occurrence, from the first step to the last.) Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy.html

   References

   • docs.paloaltonetworks.com documentation

   

   Next question

10. Question 220 · 242 in bank

    DRAG DROP - You wish to create a custom policy with build and run subtypes. Match the query types for each example. (Select your answer from the pull-down list. Answers may be used more than once or not at all.) Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy.html

    Source: Adapted from community discussion — SakeBomb

    References

    • docs.paloaltonetworks.com documentation

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 211. 242 questions available.