Question 61 · 242 in bank
Select 3Which three types of runtime rules can be created? (Choose three.)
Show answer
Answer: ABC
Prisma Certified Cloud Security Engineer242 questions across 25 pages are complete and free, with no account or card.
242 questions in this bank
Free access · progress saved on this device
Which three types of runtime rules can be created? (Choose three.)
Answer: ABC
Who can access saved searches in a cloud account?
Answer: A
The Compute Console has recently been upgraded, and the administrator plans to delay upgrading the Defenders and the Twistcli tool until some of the team’s resources have been rescaled. The Console is currently one major release ahead. What will happen as a result of the Console upgrade?
Answer: C
C https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-06/prisma-cloud-compute-edition-admin/upgrade/upgrade_process_self_hosted Prisma Cloud console is backward compatible up to two major releases back (including all minor versions) with the following: All types of Defenders. Twistcli/Jenkins plugin.
Source: Adapted from community discussion — Spippolo
What are two key requirements for integrating Okta with Prisma Cloud when multiple Amazon Web Services (AWS) cloud accounts are being used? (Choose two.)
Answer: BD
B --> Okta integration is only available with a subscription of the IAM Security module. D --> For AWS, Prisma Cloud supports a 1:1 mapping between the Okta app and your AWS account. If you have onboarded more than one AWS account on Prisma Cloud, you must create additional instances of the Okta app and generate API keys for each AWS account for which you want to ingest single sign-on (SSO) data. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-iam-security/integrate-prisma-cloud-with-okta
Source: Adapted from community discussion — Spippolo
Which resource and policy type are used to calculate AWS Net Effective Permissions? (Choose two.)
Answer: BD
BD "The list of AWS policy types and identities that are used to calculate the net effective permissions are as follows: AWS IAM role AWS IAM policy AWS IAM group AWS service control policies (SCPs) Role trust relationships Permission boundaries NotAction Policies with wild card support If your cloud environment has additional resource types, Prisma Cloud does not factor them into the net-effective permissions. In addition, permissions can also be set by a resource-based policy. The following AWS resource-based policies are supported in the net effective permissions calculation: Lambda function S3 bucket SQS queue SNS topic ECS task definition Secret manager KMS key Lambda layer version"
Source: Adapted from community discussion — poiuytr
A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can be performed by the Terraform script? (Choose two.)
Answer: BC
When onboarding a single GCP project to Prisma Cloud using a Terraform script, the two steps that can be performed are: B. Create the Prisma Cloud role. C. Enable the required APIs for Prisma Cloud.
Source: Adapted from community discussion — Spippolo
When an alert notification from the alarm center is deleted, how many hours will a similar alarm be suppressed by default?
Answer: C
C Click Delete if you want to remove the notification from the alarm center. Once deleted, a similar alarm will not appear for the next 24 hours, if the same error occurs in that time period. After 24 hours, a similar error will generate a new alarm notification. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alarms/review-alarms
Source: Adapted from community discussion — Spippolo
Which component of a Kubernetes setup can approve, modify, or reject administrative requests?
Answer: C
Which three actions are available for the container image scanning compliance rule? (Choose three.)
Answer: CDE
What will happen when a Prisma Cloud Administrator has configured agentless scanning in an environment that also has Host and Container Defenders deployed?
Answer: B
B The agentless scanning architecture lets you inspect a host and the container images in that host without having to install an agent or affecting its execution. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/agentless-scanning/onboard-accounts
Source: Adapted from community discussion — Spippolo
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCCSE practice, question 61. 242 questions available.
Version 1.0.0. How we source questions