Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 51:

  Which three actions are available for the container image scanning compliance rule? (Choose three.)

  A. Allow

  B. Snooze

  C. Block

  D. Ignore

  E. Alert

  Correct Answer: CDE

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/trusted_images

• Question 52:

  When an alert Notification from the alarm center is deleted, how many hours will a similar alarm be suppressed by default?

  A. 12

  B. 8

  C. 24

  D. 4

  Correct Answer: C

• Question 53:

  Which resource and policy type are used to calculate AWS Net Effective Permissions? (Choose two.)

  A. Service Linked Roles

  B. Lambda Function

  C. Amazon Resource Names (ARNs) using Wild Cards

  D. AWS Service Control Policies (SCPs)

  Correct Answer: BD

  "The list of AWS policy types and identities that are used to calculate the net effective permissions are as follows: AWS IAM role AWS IAM policy AWS IAM group AWS service control policies (SCPs) Role trust relationships Permission boundaries NotAction Policies with wild card support If your cloud environment has additional resource types, Prisma Cloud does not factor them into the net-effective permissions. In addition, permissions can also be set by a resource-based policy. The following AWS resource-based policies are supported in the net effective permissions calculation: Lambda function S3 bucket SQS queue SNS topic ECS task definition Secret manager KMS key Lambda layer version"

• Question 54:

  What are two key requirements for integrating Okta with Prisma Cloud when multiple Amazon Web Services (AWS) cloud accounts are being used? (Choose two.)

  A. Super Administrator permissions

  B. A valid subscription for the IAM security module

  C. An Okta API token for the primary AWS account

  D. Multiple instances of the Okta app

  Correct Answer: BD

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-iam-security/integrate-prisma-cloud-with-okta

• Question 55:

  The Compute Console has recently been upgraded, and the administrator plans to delay upgrading the Defenders and the Twistcli tool until some of the team's resources have been rescaled. The Console is currently one major release ahead.

  What will happen as a result of the Console upgrade?

  A. Defenders will disconnect, and Twistcli will stop working.

  B. Defenders will disconnect, and Twistcli will remain working.

  C. Both Defenders and Twistcli will remain working.

  D. Defenders will remain connected, and Twistcli will stop working.

  Correct Answer: C

  "Prisma Cloud console is backward compatible up to two major releases back (including all minor versions) with the following:

  -All types of Defenders.

  -Twistcli/Jenkins plugin."

• Question 56:

  Which data storage type is supported by Prisma Cloud Data Security?

  A. IBM Cloud Object Storage

  B. AWS S3 buckets

  C. Oracle Object Storage

  D. Google storage class

  Correct Answer: B

• Question 57:

  Which action must be taken to enable a user to interact programmatically with the Prisma Cloud APIs and for a nonhuman entity to be enabled for the access keys?

  A. Create a role with System Admin and generate access keys.

  B. Create a user with a role that has minimal access.

  C. Create a role with Account Group Read Only and assign it to the user.

  D. Create a role and assign it to the Service Account.

  Correct Answer: D

• Question 58:

  Which three types of runtime rules can be created? (Choose three.)

  A. Processes

  B. Network-outgoing

  C. Filesystem

  D. Kubernetes-audit

  E. Waas-request

  Correct Answer: ABC

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/custom_runtime_rules

• Question 59:

  Who can access saved searches in a cloud account?

  A. Administrators

  B. Users who can access the tenant

  C. Creators

  D. All users with whom the saved search has been shared

  Correct Answer: A

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/prisma-cloud-admin-permissions

• Question 60:

  Which two integrations enable ingesting host findings to generate alerts? (Choose two.)

  A. Splunk

  B. Tenable

  C. JIRA

  D. Qualys

  Correct Answer: BD

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrations-on-prisma-cloud/integrations-feature-support