Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 21:

  What are the three states of the Container Runtime Model? (Choose three.)

  A. Initiating

  B. Learning

  C. Active

  D. Running

  E. Archived

  Correct Answer: BCE

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/runtime_defense_containers

• Question 22:

  Which categories does the Adoption Advisor use to measure adoption progress for Cloud Security Posture Management?

  A. Visibility, Compliance, Governance, and Threat Detection and Response

  B. Network, Anomaly, and Audit Event

  C. Visibility, Security, and Compliance

  D. Foundations, Advanced, and Optimize

  Correct Answer: A

  https://www.paloaltonetworks.com/blog/prisma-cloud/operationalize-prisma-cloud-adoption-advisor/

• Question 23:

  Where are Top Critical CVEs for deployed images found? Vulnerabilities Code Repositories

  A. Defend

  Correct Answer: C

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/vulnerability_management/vuln_explorer

• Question 24:

  The exclamation mark on the resource explorer page would represent?

  A. resource has been deleted

  B. the resource was modified recently

  C. resource has alerts

  D. resource has compliance violation

  Correct Answer: C

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/investigate-incidents-on-prisma-cloud/investigate-config-incidents-on-prisma-cloud

• Question 25:

  Which role does Prisma Cloud play when configuring SSO?

  A. JIT

  B. Service provider

  C. SAML

  D. Identity provider issuer

  Correct Answer: B

  Prisma Cloud is Service provider.

• Question 26:

  Which Defender type performs registry scanning?

  A. Serverless

  B. Container

  C. Host

  D. RASP

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/vulnerability_management/registry_scanning

• Question 27:

  Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

  A. config from network where api.name = `aws-iam-get-credential-report' AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"

  B. config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

  C. config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"

  D. config where api.name = `aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

  Correct Answer: B

  Only "B" is proper query on Prisma

• Question 28:

  In WAAS Access control file upload controls, which three file types are supported out of the box? (Choose three.)

  A. Text

  B. Images

  C. Audio

  D. Documents

  E. Journal

  Correct Answer: BCD

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/waas_access_control

• Question 29:

  What are two built-in RBAC permission groups for Prisma Cloud? (Choose two.)

  A. Group Membership Admin

  B. Group Admin

  C. Account Group Admin

  D. Account Group Read Only

  Correct Answer: CD

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/prisma-cloud-administrator-roles

• Question 30:

  Which two bot categories belong to unknown bots under Web-Application and API Security (WAAS) bot protection? (Choose two.)

  A. News bots

  B. Search engine crawlers

  C. Web scrapers

  D. HTTP libraries

  Correct Answer: CD