Palo Alto Networks Prisma Certified Cloud Security Engineer - PCCSE Free Exam Questions

A. Defender scans will automatically be disabled, so agentless scans are the only scans occurring.

B. Agentless scans do not conflict with Defender scans, so both will run.

C. Agentless scan will automatically be disabled, so Defender scans are the only scans occurring.

D. Both agentless and Defender scans will be disabled and an error message will be received.

A. Designate a Fargate Defender to serve a dedicated image scanner

B. Set up a vulnerability scanner on the registry

C. Embed a Fargate Defender to automatically scan for vulnerabilities

D. Use Cloud Compliance to identify misconfigured AWS accounts

A. IntelliJ

B. Visual Studio Code

C. BitBucket

D. CircleCI

A. event from cloud.audit_logs where Risk.Level = 'high' AND user = 'root'

B. event from cloud.security_logs where operation IN ( 'ChangePassword', 'ConsoleLogin',
'DeactivateMFADevice', 'DeleteAccessKey' , 'DeleteAlarms' ) AND user = 'root'

C. event from cloud.audit_logs where operation IN ( 'ChangePassword', 'ConsoleLogin',
'DeactivateMFADevice', 'DeleteAccessKey' , 'DeleteAlarms' ) AND user = 'root'

D. config from cloud.audit_logs where operation IN ( 'ChangePassword', 'ConsoleLogin',
'DeactivateMFADevice', 'DeleteAccessKey', 'DeleteAlarms' ) AND user = 'root'

A. scope the policy to namespaces.

B. scope the policy to Defender names.

C. scope the policy to Host names.

D. scope the policy to Image names.

A. There are Windows host defenders deployed in your environment already.

B. A defender is not required to configure this type of registry scan.

C. There are Windows host defenders deployed in your environment already. Therefore, they do not need to deploy any additional defenders.

D. They can deploy any type of container defender to scan this registry.

A. 1. Configure Slack Integration
2.Create an alert rule and select "Clinical Trials" as the account group
3.Under the "Select Policies" tab, filter on severity and select "High"
4.Under the Set Alert Notification tab, choose Slack and populate the channel
5.Set Frequency to "As it Happens"

B. 1. Under the "Select Policies" tab, filter on severity and select "High"
2.Under the Set Alert Notification tab, choose Slack and populate the channel
3.Set Frequency to "As it Happens"
4.Configure Slack Integration
5.Create an Alert rule

C. 1. Create an alert rule and select "Clinical Trials" as the account group
2.Under the "Select Policies" tab, filter on severity and select "High"
3.Under the Set Alert Notification tab, choose Slack and populate the channel
4.Set Frequency to "As it Happens"
5.Set up the Slack Integration to complete the configuration

D. 1. Configure Slack Integration
2.Create an alert rule
3.Under the "Select Policies" tab, filter on severity and select "High"
4.Under the Set Alert Notification tab, choose Slack and populate the channel
5.Set Frequency to "As it Happens"

A. Okta, Azure Active Directory, PingID, and others are supported via SAML.

B. An administrator who needs to access the Prisma Cloud API can use SSO after configuration.

C. Prisma Cloud supports IdP initiated SSO, and its SAML endpoint supports the POST and GET methods.

D. An administrator can configure different Identity Providers (IdP) for all the cloud accounts that Prisma Cloud monitors.

A. enable flow logs for Prisma Cloud.

B. create the Prisma Cloud role.

C. enable the required APIs for Prisma Cloud.

D. publish the flow log to a storage bucket.

A. GET /api/v22.01/policies/compliance/ci/images

B. GET /api/v22.01/policies/compliance/ci/serverless

C. GET /api/v22.01/policies/compliance

D. GET /api/v22.01/policies/compliance/ci

A. configuring build pipelines to download twistcli at the start of each build

B. creating a new policy that allows older versions of twistcli to connect the Console

C. updating any build environments that have twistcli included to use the latest version

D. allowing Jenkins to automatically update the plugin

A. config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"

B. config where api.name = 'aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

C. config from network where api.name = 'aws-iam-get-credential-report' AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"

D. config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

A. iam from cloud.resource where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name =
'ec2:TerminateInstances'

B. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name =
'ec2:TerminateInstances'

C. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'ec2' AND source.cloud.resource.type = 'instance' AND dest.cloud.service.name = 'lambda' AND action.name =
'ec2:TerminateInstances'

D. iam from cloud.resource where cloud.type equals 'AWS' AND cloud.resource.type equals 'lambda function' AND cloud.service.name = 'ec2' AND action.name equals 'ec2:TerminateInstances'