Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 41:

  A user from an organization is unable to log in to Prisma Cloud Console after having logged in the previous day. Which area on the Console will provide input on this issue?

  A. SSO

  B. Audit Logs

  C. Users and Groups

  D. Access Control

  Correct Answer: B

• Question 42:

  What happens when a role is deleted in Prisma Cloud?

  A. The access key associated with that role is automatically deleted.

  B. Any integrations that use the access key to make calls to Prisma Cloud will stop working.

  C. The users associated with that role will be deleted.

  D. Any user who uses that key will be deleted.

  Correct Answer: A

• Question 43:

  Which two filters are available in the SecOps dashboard? (Choose two.)

  A. Time range

  B. Account Groups

  C. Service Name

  D. Cloud Region

  Correct Answer: AB

• Question 44:

  Under which tactic is "Exploit Public-Facing Application" categorized in the ATTandCK framework?

  A. Defense Evasion

  B. Initial Access

  C. Execution

  D. Privilege Escalation

  Correct Answer: B

• Question 45:

  Which three incident types will be re ected in the Incident Explorer section of Runtime Defense? (Choose three.)

  A. Crypto miners

  B. Brute Force

  C. Cross-Site Scripting

  D. Port Scanning

  E. SQL Injection

  Correct Answer: ABD

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/incident_types

• Question 46:

  During the Learning phase of the Container Runtime Model, Prisma Cloud enters a "dry run" period for how many hours?

  A. 4

  B. 48

  C. 1

  D. 24

  Correct Answer: D

• Question 47:

  Which of the below actions would indicate ?"The timestamp on the compliance dashboard"?

  A. indicates the most recent data

  B. indicates the most recent alert generated

  C. indicates when the data was ingested

  D. indicates when the data was aggregated for the results displayed

  Correct Answer: D

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/compliance-dashboard

• Question 48:

  An administrator of Prisma Cloud wants to enable role-based access control for Docker engine. Which configuration step is needed first to accomplish this task?

  A. Configure Docker's authentication sequence to first use an identity provider and then Console.

  B. Set Defender's listener type to TCP.

  C. Set Docker's listener type to TCP.

  D. Configure Defender's authentication sequence to first use an identity provider and then Console.

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/access_control/rbac

• Question 49:

  Which component of a Kubernetes setup can approve, modify, or reject administrative requests?

  A. Kube Controller

  B. Terraform Controller

  C. Admission Controller

  D. Control plane

  Correct Answer: C

• Question 50:

  What will happen when a Prisma Cloud Administrator has Configured agentless scanning in an environment that also has Host and Container Defenders deployed?

  A. Agentless scan will automatically be disabled, so Defender scans are the only scans occurring.

  B. Agentless scans do not con ict with Defender scans, so both will run.

  C. Defender scans will automatically be disabled, so agentless scans are the only scans occurring.

  D. Both agentless and Defender scans will be disabled and an error message will be received.

  Correct Answer: B