Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 151:

  The security team wants to target a CNAF policy for specific running Containers. How should the administrator scope the policy to target the Containers?

  A. scope the policy to Image names.

  B. scope the policy to namespaces.

  C. scope the policy to Defender names.

  D. scope the policy to Host names.

  Correct Answer: B

• Question 152:

  You have onboarded a public cloud account into Prisma Cloud Enterprise. configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account. config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully. Why are no alerts being generated?

  A. The public cloud account is not associated with an alert Notification.

  B. The public cloud account does not have audit trail ingestion enabled.

  C. The public cloud account does not access to configuration resources.

  D. The public cloud account is not associated with an alert rule.

  Correct Answer: D

  The account is not selected in the alert rule.

• Question 153:

  You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is necessary to complete this policy?

  A. YAML

  B. JSON

  C. CloudFormation

  D. Terraform

  Correct Answer: A

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-code-security/scan-monitor/custom-build-policies

• Question 154:

  A customer has a requirement to scan serverless functions for vulnerabilities. Which three settings are required to Configure serverless scanning? (Choose three.)

  A. Defender Name

  B. Region

  C. Credential

  D. Console Address

  E. Provider

  Correct Answer: BCE

  Reference:

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/21-04/prisma-cloud-compute-edition-admin/vulnerability_management/ serverless_functions.html

• Question 155:

  A customer has Defenders connected to Prisma Cloud Enterprise. The Defenders are deployed as a DaemonSet in OpenShift. How should the administrator get a report of vulnerabilities on hosts?

  A. Navigate to Monitor > Vulnerabilities > CVE Viewer

  B. Navigate to Defend > Vulnerabilities > VM Images

  C. Navigate to Defend > Vulnerabilities > Hosts

  D. Navigate to Monitor > Vulnerabilities > Hosts

  Correct Answer: D

• Question 156:

  A Prisma Cloud administrator is tasked with pulling a report via API. The Prisma Cloud tenant is located on app2.prismacloud.io. What is the correct API endpoint?

  A. https://api.prismacloud.io

  B. https://api2.eu.prismacloud.io

  C. httsp://api.prismacloud.cn

  D. https://api2.prismacloud.io

  Correct Answer: D

  https://prisma.pan.dev/api/cloud/api-urls/

• Question 157:

  A customer wants to harden its environment from misconfiguration.

  Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

  A. Docker daemon configuration files

  B. Docker daemon configuration

  C. Host cloud provider tags

  D. Host configuration

  E. Hosts without Defender agents

  Correct Answer: ABD

  You can e.g. select 'host config', 'daemon config' and 'daemon config files' as types in the compliance rule.

• Question 158:

  What are two ways to scan container images in Jenkins pipelines? (Choose two.)

  A. twistcli

  B. Jenkins Docker plugin

  C. Compute Jenkins plugin

  D. Compute Azure DevOps plugin

  E. Prisma Cloud Visual Studio Code plugin with Jenkins integration

  Correct Answer: AC

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/continuous_integration/jenkins_plugin.html

• Question 159:

  Which statement accurately characterizes SSO Integration on Prisma Cloud?

  A. Prisma Cloud supports IdP initiated SSO, and its SAML endpoint supports the POST and GET methods.

  B. Okta, Azure Active Directory, PingID, and others are supported via SAML.

  C. An administrator can Configure different Identity Providers (IdP) for all the cloud accounts that Prisma Cloud monitors.

  D. An administrator who needs to access the Prisma Cloud API can use SSO after configuration.

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/setup-sso-integration-on-prisma-cloud 'Prisma Cloud supports IdP initiated SSO, and it's SAML endpoint supports the POST method only.'

• Question 160:

  A customer has a requirement to automatically protect all Lambda functions with runtime protection. What is the process to automatically protect all the Lambda functions?

  A. Configure a function scan policy from the Defend/Vulnerabilities/Functions page.

  B. Configure serverless radar from the Defend/Compliance/Cloud Platforms page.

  C. Configure a manually embedded Lambda Defender.

  D. Configure a serverless auto-protect rule for the functions.

  Correct Answer: D

  Reference: https://blog.paloaltonetworks.com/prisma-cloud/protect-serverless-functions/