Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 241:

  In Azure, what permissions need to be added to Management Groups to allow Prisma Cloud to calculate net effective permissions?

  A. PaloAltoNetworks.PrismaCloud/managementGroups/*

  B. Microsoft.Management/managementGroups/descendants/read

  C. PaloAltoNetworks.PrismaCloud/managementGroups/descendants/read

  D. Microsoft.Management/managementGroups/descendants/calculate

  Correct Answer: B

• Question 242:

  Which command should be used in the Prisma Cloud twistcli tool to scan the nginx:latest image for vulnerabilities and compliance issues?

  A. $ twistcli images scan --console-address --user --password --output-file scan-results.json nginx:latest

  B. $ twistcli images scan --address --user --password --details nginx:latest

  C. $ twistcli images build --console-address --user --password --details nginx:latest

  D. $ twistcli images scan --address --username --password --details nginx:latest

  Correct Answer: B

• Question 243:

  A Prisma Cloud Administrator onboarded an AWS cloud account with agentless scanning enabled successfully to Prisma Cloud. Which item requires deploying defenders to be able to inspect the risk on the onboarded AWS account?

  A. Host vulnerability risks

  B. Container vulnerability risks

  C. Container runtime risks

  D. Host compliances risks

  Correct Answer: C

• Question 244:

  Which two information types cannot be seen in the data security dashboard? (Choose two.)

  A. Top Publicly Exposed Objects By Data Profile

  B. Bucket owner

  C. Object content

  D. Total objects

  E. Object Data Profile by Region

  Correct Answer: BC

• Question 245:

  How is the scope of each rule determined in the Prisma Cloud Compute host runtime policy?

  A. By the order in which it is created

  B. By the collection assigned to that rule

  C. By the type of network traffic it controls

  D. By the target workload

  Correct Answer: B

• Question 246:

  Which RQL query will help create a custom identity and access management (IAM) policy to alert on Lambda functions that have permission to terminate EC2 instances?

  A. iam from cloud.resource where dest.cloud.type = ’AWS

  Correct Answer: D

• Question 247:

  Which command correctly outputs scan results to stdout in tabular format and writes scan results to a JSON file while still sending the results to Console?

  A. $ twistcli images scan --address --user --password --stdout-tabular --output-file scan-results.json nginx:latest

  B. $ twistcli images scan --address --username --password --details --json-output scan-results.json nginx:latest

  C. $ twistcli images scan --address --user --password --details --file-output scan-results.json nginx:latest

  D. $ twistcli images scan --address --u --p --details --output-file scan-results.json nginx:latest

  Correct Answer: A

• Question 248:

  In Prisma Cloud for Azure Net Effective Permissions Calculation, the following Azure permission levels are supported by which three permissions? (Choose three.)

  A. Resources

  B. Tenant

  C. Subscription

  D. Resource groups

  E. Management Group

  Correct Answer: CDE