Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 31:

  Which file extension type is supported for Malware scanning in Prisma Cloud Data Security (PCDS)?

  A. .bat

  B. .apk

  C. .vb

  D. .py

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security/monitor-data-security-scan-prisma-cloud/supported-file-extensions

• Question 32:

  When configuring SSO how many IdP providers can be enabled for all the cloud accounts monitored by Prisma Cloud?

  A. 2

  B. 4

  C. 1

  D. 3

  Correct Answer: C

• Question 33:

  Which two services require external Notifications to be enabled for policy violations in the Prisma Cloud environment? (Choose two.)

  A. Splunk

  B. QROC

  C. SQS

  D. Email

  Correct Answer: AC

  B - not couse there is no such integration like QROC

  D - not couse: "For all channels except email, to enable notification of policy violations in your cloud environments in your existing operational workflows, you must Configure External Integrations on Prisma Cloud."

• Question 34:

  Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in the Amazon Web Services (AWS) Cloud? (Choose two.)

  A. API_ENDPOINT

  B. SB_QUEUE_KEY_NAME

  C. SQS_QUEUE_NAME

  D. alert_id

  Correct Answer: AC

• Question 35:

  While writing a custom RQL with array objects in the investigate page, which type of auto-suggestion a user can leverage?

  A. Auto-suggestion for array objects that are useful for comparing between arrays

  B. Auto-suggestion is not available for array objects

  C. Auto-suggestion for array objects that are useful for categorization of resource parameters

  D. Auto-suggestion for array objects that are useful for comparing between array elements

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/event-query/event-query-attributes

• Question 36:

  What is the frequency to create a compliance report? (Choose two.)

  A. Weekly

  B. One time

  C. Monthly

  D. Recurring

  Correct Answer: BD

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/add-a-new-compliance-report

• Question 37:

  Which three OWASP protections are part of Prisma Cloud Web-Application and API Security (WAAS) rule? (Choose three.)

  A. DoS Protection

  B. Local file inclusion

  C. SQL injection

  D. Suspicious binary

  E. Shellshock

  Correct Answer: CE

  https://www.paloaltonetworks.com/prisma/cloud/web-application-API-security

• Question 38:

  Which of the following is displayed in the asset inventory?

  A. EC2 instances

  B. Asset tags

  C. SSO users

  D. Federated users

  Correct Answer: A

• Question 39:

  What is the default namespace created by Defender DaemonSet during deployment?

  A. Redlock

  B. Defender

  C. Twistlock

  D. Default

  Correct Answer: C

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/configure/set_diff_paths_daemon_sets

• Question 40:

  Which alert deposition severity must be chosen to generate low and high severity alerts in the Anomaly settings when user wants to report on an unknown browser and OS, impossible time travel, or both due to account hijacking attempts?

  A. High

  B. Aggressive

  C. Moderate

  D. Conservative

  Correct Answer: B

  Aggressive:

  For unusual user activity—Report on either unknown location or service, or both to classify an anomaly.

  For account hijacking—Report on unknown browser and Operating System, impossible time travel, or both.

  For anomalous compute provisioning activity—Reports on low and higher severity alerts.