Palo Alto Networks Palo Alto Networks Certification PCCSE Questions & Answers

• Question 1:

  DRAG DROP

  Put the steps of integrating Okta with Prisma Cloud in the right order in relation to CIEM or SSO okra integration.

  Select and Place:

  

  Correct Answer:

  

• Question 2:

  Which type of query is used for scanning Infrastructure as Code (laC) templates?

  A. API

  B. XML

  C. JSON

  D. RQL

  Correct Answer: C

• Question 3:

  Which three serverless runtimes are supported by Prisma Cloud for vulnerability and compliance scans? (Choose three.)

  A. Swift

  B. Python

  C. Dart

  D. Java

  E. Node.js

  Correct Answer: BDE

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/install/install_defender/install_serverless_defender

• Question 4:

  Which two attributes are required for a custom config RQL? (Choose two.)

  A. json.rule

  B. cloud.account

  C. api.name

  D. tag

  Correct Answer: AC

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy

• Question 5:

  Which field is required during the creation of a custom config query?

  A. resource status

  B. api.name

  C. finding.type

  D. cloud.type

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/config-query/config-query-attributes#id192IG0J098M

• Question 6:

  Which role must be assigned to DevOps users who need access to deploy Container and Host Defenders in Compute?

  A. Cloud Provisioning Admin

  B. Build and Deploy Security

  C. System Admin

  D. Developer

  Correct Answer: A

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/authentication/prisma_cloud_user_roles

• Question 7:

  Which alerts are fixed by enablement of automated remediation?

  A. All applicable open alerts regardless of when they were generated, with alert status updated to "resolved"

  B. Only the open alerts that were generated before the enablement of remediation, with alert status updated to "resolved"

  C. All applicable open alerts regardless of when they were generated, with alert status updated to "dismissed"

  D. Only the open alerts that were generated after the enablement of remediation, with alert status updated to "resolved"

  Correct Answer: A

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/configure-prisma-cloud-to-automatically-remediate-alerts

• Question 8:

  What must be created in order to receive Notifications about alerts generated when the operator is away from the Prisma Cloud Console?

  A. Alarm rule

  B. Notification rule

  C. Alert rule

  D. O ine alert

  Correct Answer: C

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/prisma-cloud-alert-notifications

• Question 9:

  Which two statements apply to the Defender type Container Defender - Linux?

  A. It is implemented as runtime protection in the userspace.

  B. It is deployed as a service.

  C. It is deployed as a container.

  D. It is incapable of filesystem runtime defense.

  Correct Answer: AC

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/install/defender_types

• Question 10:

  DRAG DROP

  Move the steps to the correct order to set up and execute a serverless scan using AWS DevOps.

  Select and Place:

  

  Correct Answer: