Palo Alto Networks PCCSE Online Practice Questions and Exam Preparation

Palo Alto Networks PCCSE Online Questions & Answers

• Question 11:

  Which Prisma Cloud policy type detects port scanning activities in a customer environment?

  A. Port Scan
  B. Anomaly
  C. Config
  D. Network
  D. Network

  ---

  Explanation

  Port scanning activities are categorized as network-based threats, which are detected using network traffic analysis. In Prisma Cloud, the Network policy type is used to detect such activities.

• Question 12:

  A customer wants to turn on Auto Remediation.

  Which policy type has the built-in CLI command for remediation?

  A. Anomaly
  B. Audit Event
  C. Network
  D. config
  D. config

  ---

  Explanation

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy.html

  In Prisma Cloud, Config policies have built-in CLI commands for auto-remediation. These policies help in identifying misconfigurations within cloud environments and can automatically execute remediation commands to correct the configurations without manual intervention. This feature is part of Prisma Cloud's comprehensive approach to maintaining cloud security posture by ensuring that cloud resources are configured in accordance with best practices and compliance standards.

• Question 13:

  The Prisma Cloud administrator has Configured a new policy.

  Which steps should be used to assign this policy to a compliance standard?

  A. Edit the policy, go to step 3 (Compliance Standards), click + at the bottom, select the compliance standard, fill in the other boxes, and then click Confirm.
  B. Create the Compliance Standard from Compliance tab, and then select Add to Policy.
  C. Open the Compliance Standards section of the policy, and then save.
  D. Custom policies cannot be added to existing standards.
  A. Edit the policy, go to step 3 (Compliance Standards), click + at the bottom, select the compliance standard, fill in the other boxes, and then click Confirm.

  ---

  Explanation

  To assign a new policy to a compliance standard in Prisma Cloud, the administrator needs to edit the policy and navigate to the step where compliance standards are managed. By clicking the '+' button, the administrator can add the policy to a specific compliance standard, provide necessary details, and confirm the assignment. This integrates the custom policy into the chosen compliance standard, ensuring that compliance checks include the newly defined policy criteria.

• Question 14:

  Which file extension type is supported for Malware scanning in Prisma Cloud Data Security (PCDS)?

  A. .bat
  B. .apk
  C. .vb
  D. .py
  B. .apk

  ---

  Explanation

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security/monitor-data-security-scan-prisma-cloud/supported-file-extensions

• Question 15:

  Which three options for hardening a customer environment against misconfiguration are included in Prisma Cloud Compute compliance enforcement for hosts? (Choose three.)

  A. Serverless functions
  B. Docker daemon configuration
  C. Cloud provider tags
  D. Host configuration
  E. Hosts without Defender agents
  A. Serverless functions
  B. Docker daemon configuration
  D. Host configuration

  ---

  Explanation

  Prisma Cloud scans all hosts for compliance issues, provided that a defender is installed or the host is covered by an agentless scan. Among these, the following compliance issues are covered. -Host configuration -Docker daemon configuration https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/host_scanning

• Question 16:

  DRAG DROP

  Which order of steps map a policy to a custom compliance standard?

  (Drag the steps into the correct order of occurrence, from the first step to the last.)

  Select and Place:

  

  

• Question 17:

  Which two integrations enable ingesting host findings to generate alerts? (Choose two.)

  A. Splunk
  B. Tenable
  C. JIRA
  D. Qualys
  B. Tenable
  D. Qualys

  ---

  Explanation

  To ingest host findings and generate alerts in Prisma Cloud, integrations with Tenable (B) and Qualys (D) are supported. These integrations allow Prisma Cloud to ingest vulnerability and compliance data from Tenable and Qualys, which are renowned vulnerability management solutions. By integrating these tools, Prisma Cloud can enhance its visibility into the security posture of hosts within the cloud environment, enabling more comprehensive threat detection and response capabilities. The integration facilitates the aggregation and correlation of findings from these external sources, enriching the overall security intelligence and enabling more informed and timely decision-making regarding threat mitigation and compliance management. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrations-on-prisma-cloud/integrations-feature-support

• Question 18:

  You have onboarded a public cloud account into Prisma Cloud Enterprise. configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account. config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully. Why are no alerts being generated?

  A. The public cloud account is not associated with an alert Notification.
  B. The public cloud account does not have audit trail ingestion enabled.
  C. The public cloud account does not access to configuration resources.
  D. The public cloud account is not associated with an alert rule.
  D. The public cloud account is not associated with an alert rule.

  ---

  Explanation

  In Prisma Cloud Enterprise, for alerts to be generated for configuration assets in an onboarded public cloud account, it is essential that the account is associated with an alert rule that matches the enabled config policies. If the account is not linked to an alert rule or if the existing alert rules do not match the config policies, no alerts will be generated even though configuration resource ingestion is visible, and RQL statements return config resource results. This requirement emphasizes the need for a well-structured alerting mechanism to ensure that security incidents are promptly identified and addressed.

• Question 19:

  What are two built-in RBAC permission groups for Prisma Cloud? (Choose two.)

  A. Group Membership Admin
  B. Group Admin
  C. Account Group Admin
  D. Account Group Read Only
  C. Account Group Admin
  D. Account Group Read Only

  ---

  Explanation

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/prisma-cloud-administrator-roles

• Question 20:

  Which two integrated development environment (IDE) plugins are supported by Prisma Cloud as part of its Code Security? (Choose two.)

  A. BitBucket
  B. Visual Studio Code
  C. CircleCI
  D. IntelliJ
  B. Visual Studio Code
  D. IntelliJ

  ---

  Explanation

  Prisma Cloud by Palo Alto Networks extends its cloud security capabilities to the development environment through the integration with Integrated Development Environments (IDEs) plugins. Among the available options, Visual Studio Code and IntelliJ are supported by Prisma Cloud as part of its Code Security features. These IDE plugins enable developers to incorporate security insights directly into their development workflows, facilitating early detection and remediation of vulnerabilities and compliance issues in the codebase. Visual Studio Code, known for its versatility and extensive plugin ecosystem, and IntelliJ, popular for its powerful coding assistance and ergonomic design, are both widely used by developers. The integration with Prisma Cloud allows for seamless scanning of code for vulnerabilities, misconfigurations, and compliance with security policies, fostering a DevSecOps culture by shifting security left into the early stages of the development lifecycle. https://live.paloaltonetworks.com/t5/blogs/what-is-changing-for-ci-cd-plugins/ba-p/461676