Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 91:

  When would a policy apply if the policy is set under Defend > Vulnerability > Images > Deployed?

  A. when a serverless repository is scanned

  B. when a Container is started form an Image

  C. when the Image is built and when a Container is started form an Image

  D. when the Image is built

  Correct Answer: B

  B is correct. image build is scanned by CI policy https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-12/prisma-cloud-compute-edition-admin/vulnerability_management/vuln_management_rules

• Question 92:

  A customer has a requirement to scan serverless functions for vulnerabilities. What is the correct option to Configure scanning?

  A. Configure serverless radar from the Defend > Compliance > Cloud Platforms page.

  B. Embed serverless Defender into the function.

  C. Configure a function scan policy from the Defend > Vulnerabilities > Functions page.

  D. Use Lambda layers to deploy a Defender into the function.

  Correct Answer: C

• Question 93:

  An administrator has been tasked with a requirement by your DevSecOps team to write a script to continuously query programmatically the existing users, and the user's associated permission levels, in a Prisma Cloud Enterprise tenant. Which public documentation location should be reviewed to help determine the required attributes to carry out this step?

  A. Prisma Cloud Administrator's Guide (Compute)

  B. Prisma Cloud API Reference

  C. Prisma Cloud Compute API Reference

  D. Prisma Cloud Enterprise Administrator's Guide

  Correct Answer: B

  Prisma Cloud Enterprise is CSPM + CWP but Prisma Cloud Compute API Ref doesn't exist anymore

• Question 94:

  Which two attributes of policies can be fetched using API? (Choose two.)

  A. policy label

  B. policy signature

  C. policy mode

  D. policy violation

  Correct Answer: AC

  https://prisma.pan.dev/api/cloud/cspm/policy/

• Question 95:

  Which two options may be used to upgrade the Defenders with a Console v20.04 and Kubernetes deployment? (Choose two.)

  A. Run the provided curl | bash script from Console to remove Defenders, and then use Cloud Discovery to automatically redeploy Defenders.

  B. Remove Defenders DaemonSet, and then use Cloud Discovery to automatically redeploy the Defenders.

  C. Remove Defenders, and then deploy the new DaemonSet so Defenders do not have to automatically update on each deployment.

  D. Let Defenders automatically upgrade.

  Correct Answer: AB

• Question 96:

  Which two CI/CD plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.)

  A. BitBucket

  B. Visual Studio Code

  C. CircleCI

  D. IntelliJ

  Correct Answer: AC

  https://live.paloaltonetworks.com/t5/blogs/what-is-changing-for-ci-cd-plugins/ba-p/461676

• Question 97:

  Given the following JSON query:

  $.resource[*].aws_s3_bucket exists

  Which tab is the correct place to add the JSON query when creating a config policy?

  A. Details

  B. Compliance Standards

  C. Remediation

  D. Build Your Rule (Run tab)

  E. Build Your Rule (Build tab)

  Correct Answer: E

• Question 98:

  Which two fields are required to Configure SSO in Prisma Cloud? (Choose two.)

  A. Prisma Cloud Access SAML URL

  B. Identity Provider Issuer

  C. certificate

  D. Identity Provider Logout URL

  Correct Answer: BC

  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMYeCAM

• Question 99:

  Which two IDE plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.)

  A. BitBucket

  B. Visual Studio Code

  C. CircleCI

  D. IntelliJ

  Correct Answer: BD

  https://live.paloaltonetworks.com/t5/blogs/what-is-changing-for-ci-cd-plugins/ba-p/461676

• Question 100:

  An administrator for Prisma Cloud needs to obtain a graphical view to monitor all connections, including connections across hosts and connections to any Configured network objects. Which setting does the administrator enable or Configure to accomplish this task?

  A. ADEM

  B. WAAS Analytics

  C. Telemetry

  D. Cloud Native Network Firewall

  E. Host Insight

  Correct Answer: D