PCCSE practice questions 221–230

1. Question 221 · 242 in bank

   Which statement is true regarding CloudFormation templates?

   • AScan support does not currently exist for nested references, macros, or intrinsic functions.
   • BA single template or a zip archive of template files cannot be scanned with a single API request.
   • CRequest-Header-Field 'cloudformation-version' is required to request a scan.
   • DScan support is provided for JSON, HTML and YAML formats.

   Show answer

   Answer: A

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-devops-security/use-the-prisma-cloud-iac-scan-rest-api.html

   Next question

2. Question 222 · 242 in bank

   Select 2

   A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time. What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)

   • Amanual installation of the latest twistcli tool prior to the rolling upgrade
   • Ball Defenders set in read-only mode before execution of the rolling upgrade
   • Ca second location where you can install the Console
   • Dadditional workload licenses are required to perform the rolling upgrade
   • Ean existing Console at version n-1

   Show answer

   Answer: AE

   References

   • docs.paloaltonetworks.com documentation

   Next question

3. Question 223 · 242 in bank

   A security team notices a number of anomalies under Monitor > Events. The incident response team works with the developers to determine that these anomalies are false positives. What will be the effect if the security team chooses to Relearn on this image?

   • AThe model is deleted, and Defender will relearn for 24 hours.
   • BThe anomalies detected will automatically be added to the model.
   • CThe model is deleted and returns to the initial learning state.
   • DThe model is retained, and any new behavior observed during the new learning period will be added to the existing model.

   Show answer

   Answer: D

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 224 · 242 in bank

   An administrator sees that a runtime audit has been generated for a Container. The audit message is `DNS resolution of suspicious name wikipedia.com. type A`. Why would this message appear as an audit?

   • AThe DNS was not learned as part of the Container model or added to the DNS allow list.
   • BThis is a DNS known to be a source of malware.
   • CThe process calling out to this domain was not part of the Container model.
   • DThe Layer7 firewall detected this as anomalous behavior.

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation

   Next question

5. Question 225 · 242 in bank

   Which `kind` of Kubernetes object is configured to ensure that Defender is acting as the admission controller?

   • AMutatingWebhookConfiguration
   • BDestinationRules
   • CValidatingWebhookConfiguration
   • DPodSecurityPolicies

   Show answer

   Answer: C

   Explanation

   Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/21-04/prisma-cloud-compute-edition-admin/access_control/open_policy_agent.html

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 226 · 242 in bank

   Select 3

   Which three options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)

   • AScope - Scans run on a particular host
   • BCredential
   • CApply rule only when vendor fixes are available
   • DFailure threshold
   • EGrace Period

   Show answer

   Answer: CDE

   Next question

7. Question 227 · 242 in bank

   Which component(s), if any, will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?

   • ADefenders
   • BConsole
   • CJenkins
   • Dtwistcli

   Show answer

   Answer: B

   Next question

8. Question 228 · 242 in bank

   Which port should a security team use to pull data from Console's API?

   • A53
   • B25
   • C8084
   • D8083

   Show answer

   Answer: D

   Explanation

   D Both Console’s API and web interfaces, served on port 8083 (HTTPS), require authentication over a different channel with different credentials (e.g. username and password, access key, and so on), none of which Defender holds. https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-06/prisma-cloud-compute-edition-admin/technology_overviews/defender_architecture

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

9. Question 229 · 242 in bank

   You are an existing customer of Prisma Cloud Enterprise. You want to onboard a public cloud account and immediately see all of the alerts associated with this account based off ALL of your tenant's existing enabled policies. There is no requirement to send alerts from this account to a downstream application at this time. Which option shows the steps required during the alert rule creation process to achieve this objective?

   • AEnsure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select ג€select all policiesג€ checkbox as part of the alert rule Confirm the alert rule
   • BEnsure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select one or more policies checkbox as part of the alert rule Confirm the alert rule
   • CEnsure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select one or more policies as part of the alert rule Add alert notifications Confirm the alert rule
   • DEnsure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select ג€select all policiesג€ checkbox as part of the alert rule Add alert notifications Confirm the alert rule

   Show answer

   Answer: A

   Next question

10. Question 230 · 242 in bank

    A customer has configured the JIT, and the user created by the process is trying to log in to the Prisma Cloud console. The user encounters the following error message:

    

    What is the reason for the error message?

    • AThe attribute name is not set correctly in JIT settings.
    • BThe user does not exist.
    • CThe user entered an incorrect password
    • DThe role is not assigned for the user.

    Show answer

    Answer: A

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 221. 242 questions available.