Palo Alto Networks PCCSE Online Practice Questions and Exam Preparation

Palo Alto Networks PCCSE Online Questions & Answers

• Question 1:

  DRAG DROP

  Put the steps of integrating Okta with Prisma Cloud in the right order in relation to CIEM or SSO okra integration.

  Select and Place:

  

  

• Question 2:

  DRAG DROP

  Move the steps to the correct order to set up and execute a serverless scan using AWS DevOps.

  Select and Place:

  

  

• Question 3:

  DRAG DROP

  Put the steps involved to configure and scan using the IntelliJ plugin in the correct order.

  Select and Place:

  

  

• Question 4:

  DRAG DROP

  You wish to create a custom policy with build and run subtypes.

  Match the query types for each example.

  (Select your answer from the pull-down list. Answers may be used more than once or not at all.)

  Select and Place:

  

  

• Question 5:

  DRAG DROP

  What is the order of steps to create a custom network policy?

  (Drag the steps into the correct order of occurrence, from the first step to the last.)

  Select and Place:

  

  

• Question 6:

  DRAG DROP

  What is the order of steps in a Jenkins pipeline scan?

  (Drag the steps into the correct order of occurrence, from the first step to the last.)

  Select and Place:

  

  

• Question 7:

  An administrator wants to retrieve the compliance policies for images scanned in a continuous integration (CI) pipeline.

  Which endpoint will successfully execute to enable access to the images via API?

  A. GET /api/v22.01/policies/compliance
  B. GET /api/v22.01/policies/compliance/ci
  C. GET /api/v22.01/policies/compliance/ci/images
  D. GET /api/v22.01/policies/compliance/ci/serverless
  C. GET /api/v22.01/policies/compliance/ci/images

  ---

  explanation:

  Explanation

• Question 8:

  The attempted bytes count displays?

  A. traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
  B. traffic that is either denied by the security group or firewall rules.
  C. traffic that is either denied by the firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
  D. traffic denied by the security group or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
  A. traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

  ---

  explanation:

  Explanation

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/investigate-incidents-on-prisma-cloud/investigate-network-incidents-on-prisma-cloud

• Question 9:

  Anomaly policy uses which two logs to identify unusual network and user activity? (Choose two.)

  A. Network ow
  B. Audit
  C. traffic
  D. Users
  A. Network ow
  B. Audit

  ---

  explanation:

  Explanation

  Anomaly policies in Prisma Cloud utilize Network flow logs (A) and Audit logs (B) to identify unusual network and user activities. Network flow logs provide visibility into the traffic flow across the network, helping detect anomalies in communication patterns that might indicate malicious activities or network misconfigurations. Audit logs record user actions within the system, offering insights into potentially unauthorized or suspicious operations that could compromise security. By analyzing these logs, anomaly policies can effectively pinpoint irregularities that deviate from established baselines, enabling timely detection and response to potential security threats.

• Question 10:

  What are two alarm types that are registered after alarms are enabled? (Choose two.)

  A. Onboarded Cloud Accounts status
  B. Resource status
  C. Compute resources
  D. External integrations status
  A. Onboarded Cloud Accounts status
  D. External integrations status

  ---

  explanation:

  Explanation

  Upon enabling alarms in Prisma Cloud, two critical alarm types that are registered are Onboarded Cloud Accounts status (A) and External integrations status (D). These alarms are pivotal for maintaining the health and security of the cloud environment. The Onboarded Cloud Accounts status alarms alert administrators about the connectivity and health of cloud accounts integrated with Prisma Cloud, ensuring continuous monitoring and security coverage. The External integrations status alarms provide notifications regarding the operational status of third-party services and tools integrated with Prisma Cloud, such as SIEMs, ticketing systems, or other security tools, ensuring that these integrations function correctly to support comprehensive security and incident response workflows. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alarms/prisma-cloud-alarms