PCCSE practice questions 21–30

1. Question 21 · 242 in bank

   A customer has a requirement to scan serverless functions for vulnerabilities. What is the correct option to configure scanning?

   • AConfigure serverless radar from the Defend > Compliance > Cloud Platforms page.
   • BEmbed serverless Defender into the function.
   • CConfigure a function scan policy from the Defend > Vulnerabilities > Functions page.
   • DUse Lambda layers to deploy a Defender into the function.

   Show answer

   Answer: C

   Explanation

   Should be C. Configure Prisma Cloud to periodically scan your serverless functions. Unlike image scanning, all function scanning is handled by Console. ..... Go to Defend > Vulnerabilities > Functions > Functions. https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-12/prisma-cloud-compute-edition-admin/vulnerability_management/serverless_functions

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

2. Question 22 · 242 in bank

   Select 3

   Which three steps are involved in onboarding an account for Data Security? (Choose three.)

   • ACreate a read-only role with in-line policies
   • BCreate a Cloudtrail with SNS Topic
   • CEnable Flow Logs
   • DEnter the RoleARN and SNSARN
   • ECreate a S3 bucket

   Show answer

   Answer: BDE

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

3. Question 23 · 242 in bank

   An administrator has been tasked with a requirement by your DevSecOps team to write a script to continuously query programmatically the existing users, and the user’s associated permission levels, in a Prisma Cloud Enterprise tenant. Which public documentation location should be reviewed to help determine the required attributes to carry out this step?

   • APrisma Cloud Administrator’s Guide (Compute)
   • BPrisma Cloud API Reference
   • CPrisma Cloud Compute API Reference
   • DPrisma Cloud Enterprise Administrator’s Guide

   Show answer

   Answer: B

   Explanation

   B The Prisma Cloud API allows you to programmatically access and manage your Prisma Cloud resources, making it easy to automate tasks. (https://pan.dev/prisma-cloud/api/)

   Source: Adapted from community discussion — Jihe

   Next question

4. Question 24 · 242 in bank

   When would a policy apply if the policy is set under Defend > Vulnerability > Images > Deployed?

   • Awhen a serverless repository is scanned
   • Bwhen a Container is started form an Image
   • Cwhen the Image is built and when a Container is started form an Image
   • Dwhen the Image is built

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation

   Next question

5. Question 25 · 242 in bank

   Select 2

   Which two required request headers interface with Prisma Cloud API? (Choose two.)

   • AContent-type:application/json
   • Bx-redlock-auth
   • C>x-redlock-request-id
   • DContent-type:application/xml

   Show answer

   Answer: AB

   Next question

6. Question 26 · 242 in bank

   An administrator has a requirement to ingest all Console and Defender logs to Splunk. Which option will satisfy this requirement in Prisma Cloud Compute?

   • AEnable the API settings for logging.
   • BEnable the CSV export in the Console.
   • CEnable the syslog option in the Console
   • DEnable the Splunk option in the Console.

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation

   Next question

7. Question 27 · 242 in bank

   The security team wants to enable the “block” option under compliance checks on the host. What effect will this option have if it violates the compliance check?

   • AThe host will be taken offline.
   • BAdditional hosts will be prevented form starting.
   • CContainers on a host will be stopped.
   • DNo containers will be allowed to start on that host.

   Show answer

   Answer: D

   Explanation

   When compliance rules are configured with block actions, they are enforced when a container is created. If the instantiated container violates your policy, Prisma Cloud prevents the container from being created.

   Source: Adapted from community discussion — HARRY

   References

   • docs.paloaltonetworks.com documentation

   Next question

8. Question 28 · 242 in bank

   During an initial deployment of Prisma Cloud Compute, the customer sees vulnerabilities in their environment. Which statement correctly describes the default vulnerability policy?

   • AIt blocks all containers that contain a vulnerability.
   • BIt alerts on any container with more than three critical vulnerabilities.
   • CIt blocks containers after 30 days if they contain a critical vulnerability.
   • DIt alerts on all vulnerabilities, regardless of severity.

   Show answer

   Answer: D

   References

   • docs.paloaltonetworks.com documentation

   Next question

9. Question 29 · 242 in bank

   Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster. Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?

   • AFrom the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.
   • BFrom the deployment page configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.
   • CFrom the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.
   • DFrom the deployment page in Console, choose twistlock-console for Console identifier, and run the curl | bash script on the master Kubernetes node.

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation

   Next question

10. Question 30 · 242 in bank

    Which RQL query type is invalid?

    • AEvent
    • BIAM
    • CIncident
    • DConfig

    Show answer

    Answer: C

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 21. 242 questions available.