PCCSE practice questions 51–60

1. Question 51 · 242 in bank

   How many CLI remediation commands can be added in a custom policy sequence?

   • A2
   • B1
   • C4
   • D5

   Show answer

   Answer: D

   References

   • docs.paloaltonetworks.com documentation

   Next question

2. Question 52 · 242 in bank

   An administrator wants to retrieve the compliance policies for images scanned in a continuous integration (CI) pipeline. Which endpoint will successfully execute to enable access to the images via API?

   • AGET /api/v22.01/policies/compliance
   • BGET /api/v22.01/policies/compliance/ci
   • CGET /api/v22.01/policies/compliance/ci/images
   • DGET /api/v22.01/policies/compliance/ci/serverless

   Show answer

   Answer: C

   Next question

3. Question 53 · 242 in bank

   The attempted bytes count displays?

   • Atraffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
   • Btraffic that is either denied by the security group or firewall rules.
   • Ctraffic that is either denied by the firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
   • Dtraffic denied by the security group or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 54 · 242 in bank

   Select 2

   Anomaly policy uses which two logs to identify unusual network and user activity? (Choose two.)

   • ANetwork flow
   • BAudit
   • CTraffic
   • DUsers

   Show answer

   Answer: AB

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

5. Question 55 · 242 in bank

   Which step is included when configuring Kubernetes to use Prisma Cloud Compute as an admission controller?

   • Acopy the Console address and set the config map for the default namespace.
   • Bcreate a new namespace in Kubernetes called admission-controller.
   • Cenable Kubernetes auditing from the Defend > Access > Kubernetes page in the Console.
   • Dcopy the admission controller configuration from the Console and apply it to Kubernetes.

   Show answer

   Answer: D

   Explanation

   Reference: https://thenewstack.io/kubernetes-security-best-practices-to-keep-you-out-of-the-news/

   Source: Adapted from community discussion — 7a9e5e5

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 56 · 242 in bank

   Select 2

   What are two alarm types that are registered after alarms are enabled? (Choose two.)

   • AOnboarded Cloud Accounts status
   • BResource status
   • CCompute resources
   • DExternal integrations status

   Show answer

   Answer: AD

   Explanation

   AD After you enable Alarms, Prisma Cloud automatically generates alarms related to external Integrations status, onboarded Cloud Accounts status, and license management that includes license usage and expiry, and when credit usage exceeds a configured threshold.

   Source: Adapted from community discussion — Spippolo

   References

   • docs.paloaltonetworks.com documentation

   Next question

7. Question 57 · 242 in bank

   What is the correct method for ensuring key-sensitive data related to SSNs and credit card numbers cannot be viewed in Dashboard > Data view during investigations?

   • AGo to Settings > Data > Snippet Masking and select Full Mask.
   • BGo to Settings > Data > Data Patterns, search for SSN Pattern, edit it, and modify the proximity keywords.
   • CGo to Settings > Cloud Accounts > Edit Cloud Account > Assign Account Group and select a group with limited permissions.
   • DGo to Policies > Data > Clone > Modify Objects containing Financial Information publicly exposed and change the file exposure to Private.

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation

   Next question

8. Question 58 · 242 in bank

   Select 2

   Which two integrations enable ingesting host findings to generate alerts? (Choose two.)

   • ASplunk
   • BTenable
   • CJIRA
   • DQualys

   Show answer

   Answer: BD

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

9. Question 59 · 242 in bank

   Which data storage type is supported by Prisma Cloud Data Security?

   • AIBM Cloud Object Storage
   • BAWS S3 buckets
   • COracle Object Storage
   • DGoogle storage class

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation

   Next question

10. Question 60 · 242 in bank

    Which action must be taken to enable a user to interact programmatically with the Prisma Cloud APIs and for a nonhuman entity to be enabled for the access keys?

    • ACreate a role with System Admin and generate access keys.
    • BCreate a user with a role that has minimal access.
    • CCreate a role with Account Group Read Only and assign it to the user.
    • DCreate a role and assign it to the Service Account.

    Show answer

    Answer: D

    References

    • docs.paloaltonetworks.com documentation
    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCSE practice, question 51. 242 questions available.