Question 231 · 242 in bank
Select 2What are the two ways to scope a CI policy for image scanning? (Choose two.)
Show answer
Answer: BD
PCCSEProfessionalPalo Alto NetworksAll questions freePage 24 of 25
PCCSE practice questions 231–240
Prisma Certified Cloud Security Engineer242 questions across 25 pages are complete and free, with no account or card.
Official study references
242 questions in this bank
Free access · progress saved on this device
Question 232 · 242 in bank
Which policy type in Prisma Cloud can protect against malware?
Show answer
Answer: A
References
Question 233 · 242 in bank
If you are required to run in an air-gapped environment, which product should you install?
Show answer
Answer: B
Question 234 · 242 in bank
A customer does not want alerts to be generated from network traffic that originates from trusted internal networks. Which setting should you use to meet this customer's request?
Show answer
Answer: C
Explanation
Trusted Alert IP Addresses—If you have internal networks that connect to your public cloud infrastructure, you can add these IP address ranges (or CIDR blocks) as trusted on Prisma Cloud. When you add IP addresses to this list, you can create a label to identify your internal networks that are not in the private IP address space to make alert analysis easier. Key words in the above is internal networks.
Source: Adapted from community discussion — ominator
Question 235 · 242 in bank
What is the maximum number of access keys a user can generate in Prisma Cloud with a System Admin role?
Show answer
Answer: B
References
Question 236 · 242 in bank
DRAG DROP - Put the steps involved to configure and scan using the IntelliJ plugin in the correct order.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Question 237 · 242 in bank
An administrator needs to detect and alert on any activities performed by a root account. Which policy type should be used?
Show answer
Answer: D
References
Question 238 · 242 in bank
A customer has multiple violations in the environment including: • User namespace is enabled • An LDAP server is enabled • SSH root is enabled Which section of Console should the administrator use to review these findings?
Show answer
Answer: D
Explanation
D for exclusion. The Compliance section in Prisma Cloud Console provides visibility into compliance violations and allows administrators to manage and remediate them.
Source: Adapted from community discussion — Spippolo
References
Question 239 · 242 in bank
A customer has serverless functions that are deployed in multiple clouds. Which serverless cloud provider is covered be “overly permissive service access” compliance check?
Show answer
Answer: C
References
Question 240 · 242 in bank
A customer has a requirement to restrict any container from resolving the name www.evil-url.com. How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
Show answer
Answer: D
Explanation
D --> I think D, because we have to restrict any container from resolving, we don't need to block the container; so, the correct answer should be "prevent" by default.
Source: Adapted from community discussion — Spippolo
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCCSE practice, question 231. 242 questions available.
About this question bank
Version 1.0.0. How we source questions