Question 71 · 242 in bank
An administrator of Prisma Cloud wants to enable role-based access control for Docker engine. Which configuration step is needed first to accomplish this task?
Show answer
Answer: B
Prisma Certified Cloud Security Engineer242 questions across 25 pages are complete and free, with no account or card.
242 questions in this bank
Free access · progress saved on this device
An administrator of Prisma Cloud wants to enable role-based access control for Docker engine. Which configuration step is needed first to accomplish this task?
Answer: B
Which of the below actions would indicate – “The timestamp on the compliance dashboard”?
Answer: D
D The dashboard results include data for the last full hour. The timestamp on the bottom left corner of the screen indicates when the data was aggregated for the results displayed. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/compliance-dashboard
Source: Adapted from community discussion — Spippolo
During the Learning phase of the Container Runtime Model, Prisma Cloud enters a “dry run” period for how many hours?
Answer: D
D Learning mode is the phase in which Prisma Cloud performs either static or dynamic analysis. Because the model depends on behavioral inputs, images stay in learning mode for 1 hour to complete the model. After this 1 hour, Prisma Cloud enters a 'dry run' period for 24 hours to ensure there are no behavioral changes and the model is complete. If during these 24 hours, behavioral changes are observed, the model goes back to Learning mode for an additional 24 hours.
Source: Adapted from community discussion — Spippolo
Which three incident types will be reflected in the Incident Explorer section of Runtime Defense? (Choose three.)
Answer: ABD
ABD This section describes the incident types surfaced in Incident Explorer. Altered binary Backdoor admin accounts Backdoor SSH access Brute force Crypto miners Execution flow hijack attempt Kubernetes attack Lateral movement Malware Port scanning Reverse shell Suspicious binary https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/incident_types
Source: Adapted from community discussion — Spippolo
Which two filters are available in the SecOps dashboard? (Choose two.)
Answer: AB
AB The DashboardSecOps provides a graphical view of the performance of assets that are connected to the Internet, the alerts by policy type over time, the alerts by severity, and the policy violations over time. You can filter by time range, account groups, and cloud accounts to dig further and see a quick summary of your security challenges. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-dashboards/secops
Source: Adapted from community discussion — Spippolo
Under which tactic is “Exploit Public-Facing Application” categorized in the ATT&CK framework?
Which statement about build and run policies is true?
Answer: A
A --> Build policies are used to validate Infrastructure-as-Code (IaC) templates, such as those written in Terraform or AWS CloudFormation, for security misconfigurations.
Source: Adapted from community discussion — Spippolo
Which alert deposition severity must be chosen to generate low and high severity alerts in the Anomaly settings when user wants to report on an unknown browser and OS, impossible time travel, or both due to account hijacking attempts?
Answer: B
B Alert Disposition - Aggressive Generate alerts for the events with unusual OS and unusual browser or consecutive logins from distant locations within short time (impossible time travel) or both the cases Alert Disposition - Conservative Generate alerts for only the events with consecutive logins from distant locations within short time (impossible time travel) High --> is referring to Training Model Threshold Moderate --> There isn't
Source: Adapted from community discussion — Spippolo
A user from an organization is unable to log in to Prisma Cloud Console after having logged in the previous day. Which area on the Console will provide input on this issue?
Answer: B
A See the below Doc STEP 2_O (15): Using View last SSO login failures, you can see details of last five login issues or errors for SSO authentication for any users. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/setup-sso-integration-on-prisma-cloud/setup-sso-integration-on-prisma-cloud-for-okta
Source: Adapted from community discussion — Jihe
What happens when a role is deleted in Prisma Cloud?
Answer: A
A B "If you delete a role, the access keys associated with the role are automatically deleted, and any integrations that use the access key to make calls to Prisma Cloud will stop working"
Source: Adapted from community discussion — poiuytr
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCCSE practice, question 71. 242 questions available.
Version 1.0.0. How we source questions