PCCSE Dumps By Pros - 1st Attempt Guaranteed Success
100% Guarantee Download PCCSE Exam Dumps PDF Q&A
NEW QUESTION # 47
A customer has a requirement to scan serverless functions for vulnerabilities. Which three settings are required to configure serverless scanning? (Choose three )
- A. Provider
- B. Console Address
- C. Defender Name
- D. Region
- E. Credential
Answer: A,B,C
NEW QUESTION # 48
Which statement accurately characterizes SSO Integration on Prisma Cloud?
- A. An administrator who needs to access the Prisma Cloud API can use SSO after configuration.
- B. Okta, Azure Active Directory. PingID, and others are supported via SAML
- C. An administrator can configure different Identity Providers (IdP) for all the cloud accounts that Prisma Cloud monitors.
- D. Prisma Cloud supports IdP initiated SSO. and its SAML endpoint supports the POST and GET methods
Answer: B
NEW QUESTION # 49
A user from an organization is unable to log in to Prisma Cloud Console after having logged in the previous day.
Which area on the Console will provide input on this issue?
- A. Users & Groups
- B. Audit Logs
- C. Access Control
- D. SSO
Answer: B
NEW QUESTION # 50
An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise tenant.
In which order will the APIs be executed for this service?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Answer:
Explanation:
NEW QUESTION # 51
What is the behavior of Defenders when the Console is unreachable during upgrades?
- A. Defenders continue to alert and enforce using the policies and settings most recently cached before upgrading the Console.
- B. Defenders continue to alert, but not enforce, using the policies and settings most recently cached before upgrading the Console.
- C. Defenders will fail closed until the web-socket can be re-established
- D. Defenders will fail open until the web-socket can be reestablished.
Answer: A
NEW QUESTION # 52
Which categories does the Adoption Advisor use to measure adoption progress for Cloud Security Posture Management?
- A. Visibility, Compliance, Governance, and Threat Detection and Response
- B. Visibility, Security, and Compliance
- C. Network, Anomaly, and Audit Event
- D. Foundations, Advanced, and Optimize
Answer: A
Explanation:
The Adoption Advisor uses four categories to measure adoption progress for Cloud Security Posture Management: Visibility, Compliance, Governance, and Threat Detection and Response. Visibility helps to identify the resources in the environment and to ensure that security controls are in place. Compliance helps to ensure that the environment is meeting regulatory and industry standards. Governance helps to ensure that the environment is secure and managed according to policy. Threat Detection and Response helps to detect and respond to threats quickly and effectively.
NEW QUESTION # 53
Which two attributes of policies can be fetched using API? (Choose two.)
- A. policy signature
- B. policy label
- C. policy mode
- D. policy violation
Answer: B,D
NEW QUESTION # 54
Which three fields are mandatory when authenticating the Prisma Cloud plugin in the IntelliJ application? (Choose three.)
- A. Prisma Cloud API URL
- B. Tags
- C. Asset Name
- D. Access Key
- E. Secret Key
Answer: A,D,E
NEW QUESTION # 55
Which authentication mechanism is supported by Prisma Cloud?
- A. Certificate-based authentication for the Console Ul and the API
- B. SAML-based authentication for the API
- C. Certificate-based authentication only for the API
- D. Certificate-based authentication only for the Console Ul
Answer: A
NEW QUESTION # 56
A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment. Which action needs to be set for "do not use privileged containers?
- A. Alert
- B. Fail
- C. Prevent
- D. Block
Answer: A
NEW QUESTION # 57
A customer wants to be notified about port scanning network activities in their environment Which policy type detects this behavior?
- A. Network
- B. Config
- C. Port Scan
- D. Anomaly
Answer: D
NEW QUESTION # 58
The InfoSec team wants to be notified via email each time a Security Group is misconfigured Which Prisma Cloud tab should you choose to complete this request?
- A. Events
- B. Alert Rules
- C. Policies
- D. Notifications
Answer: C
NEW QUESTION # 59
A customer has Defenders connected to Prisma Cloud Enterprise. The Defenders are deployed as a DaemonSet in OpenShift.
How should the administrator get a report of vulnerabilities on hosts?
- A. Navigate to Monitor > Vulnerabilities > CVE Viewer
- B. Navigate to Defend > Vulnerabilities > Hosts
- C. Navigate to Monitor > Vulnerabilities > Hosts
- D. Navigate to Defend > Vulnerabilities > VM Images
Answer: C
NEW QUESTION # 60
Which option shows the steps to install the Console in a Kubernetes Cluster?
- A. Download the Console and Defender image Generate YAML for Defender Deploy Defender YAML using kubectl
- B. Download the Console and Defender image Download YAML for Defender from the document site Deploy Defender YAML using kubectl
- C. Download and extract release tarball Download the YAML for Console Deploy Console YAML using kubectl
- D. Download and extract release tarball Generate YAML for Console Deploy Console YAML using kubectl
Answer: C
NEW QUESTION # 61
Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?
- A. Download and extract the release tarball
Create an EPS file system and mount to each node in the cluster
Create the Console task definition
Deploy the task definition - B. The console cannot natively run in an ECS cluster.
A onebox deployment should be used. - C. Download and extract the release tarball
Ensure that each node has it own storage for Console data
Create the Console task definition
Deploy the task definition - D. Download and extract release tarball
Download task from AWS
Create the Console task definition
Deploy the task definition
Answer: D
NEW QUESTION # 62
Which three types of classifications are available in the Data Security module? (Choose three.)
- A. Malicious IP
- B. Financial information
- C. Malware
- D. Personally identifiable information
- E. Compliance standard
Answer: B,C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security.html
NEW QUESTION # 63
A manager informs the SOC that one or more RDS instances have been compromised and the SOC needs to make sure production RDS instances are NOT publicly accessible.
Which action should the SOC take to follow security best practices?
- A. Enable "AWS RDS database instance is publicly accessible" policy and add policy to an auto-remediation alert rule.
- B. Enable "AWS S3 bucket is publicly accessible" policy and add policy to an auto-remediation alert rule.
- C. Enable "AWS RDS database instance is publicly accessible" policy and for each alert, check that it is a production instance, and then manually remediate.
- D. Enable "AWS S3 bucket is publicly accessible" policy and manually remediate each alert.
Answer: A
NEW QUESTION # 64
Given the following RQL:
event from cloud.audit_logs where operation IN ('CreateCryptoKey', 'DestroyCryptoKeyVersion',
'v1.compute.disks.createSnapshot')
Which audit event snippet is identified?
A)
B)
C)
D)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
NEW QUESTION # 65
Given this information:
The Console is located at https://prisma-console.mydomain.local The username is: cluster The password is: password123 The image to scan is: myimage:latest Which twistcli command should be used to scan a Container for vulnerabilities and display the details about each vulnerability?
- A. twistcli images scan --address prisma-console.mydomain.local -u cluster -p password123
--vulnerability- details myimage:latest - B. twistcli images scan --console-address https://prisma-console.mydomain.local -u cluster -p password123
-- details myimage:latest - C. twistcli images scan --console-address prisma-console.mydomain.local -u cluster -p password123 -- vulnerability-details myimage:latest
- D. twistcli images scan --address https://prisma-console.mydomain.local -u cluster -p password123 --details myimage:latest
Answer: D
NEW QUESTION # 66
......
Earn Quick And Easy Success With PCCSE Dumps: https://www.vce4dumps.com/PCCSE-valid-torrent.html
Kickstart your Career with Real Updated Questions: https://drive.google.com/open?id=1GpPUMZBnIUI8kaLVe2E4nitWXBb5IhuP