Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 61:

  Anomaly policy uses which two logs to identify unusual network and user activity? (Choose two.)

  A. Network ow

  B. Audit

  C. traffic

  D. Users

  Correct Answer: AB

• Question 62:

  What are two alarm types that are registered after alarms are enabled? (Choose two.)

  A. Onboarded Cloud Accounts status

  B. Resource status

  C. Compute resources

  D. External integrations status

  Correct Answer: AD

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alarms/prisma-cloud-alarms

• Question 63:

  What is the correct method for ensuring key-sensitive data related to SSNs and credit card numbers cannot be viewed in Dashboard > Data view during investigations?

  A. Go to Settings > Data > Snippet Masking and select Full Mask.

  B. Go to Settings > Data > Data Patterns, search for SSN Pattern, edit it, and modify the proximity keywords.

  C. Go to Settings > Cloud Accounts > Edit Cloud Account > Assign Account Group and select a group with limited permissions.

  D. Go to Policies > Data > Clone > Modify Objects containing Financial Information publicly exposed and change the file exposure to Private.

  Correct Answer: A

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security/monitor-data-security-scan-prisma-cloud/mask-sensitive-data-on-prisma-cloud

• Question 64:

  An administrator wants to retrieve the compliance policies for images scanned in a continuous integration (CI) pipeline. Which endpoint will successfully execute to enable access to the images via API?

  A. GET /api/v22.01/policies/compliance

  B. GET /api/v22.01/policies/compliance/ci

  C. GET /api/v22.01/policies/compliance/ci/images

  D. GET /api/v22.01/policies/compliance/ci/serverless

  Correct Answer: C

• Question 65:

  The attempted bytes count displays?

  A. traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

  B. traffic that is either denied by the security group or firewall rules.

  C. traffic that is either denied by the firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

  D. traffic denied by the security group or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

  Correct Answer: A

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/investigate-incidents-on-prisma-cloud/investigate-network-incidents-on-prisma-cloud

• Question 66:

  How many CLI remediation commands can be added in a custom policy sequence?

  A. 2

  B. 1

  C. 4

  D. 5

  Correct Answer: D

• Question 67:

  Which three public cloud providers are supported for VM image scanning? (Choose three.)

  A. GCP

  B. Alibaba

  C. Oracle

  D. AWS

  E. Azure

  Correct Answer: ADE

• Question 68:

  Where can Defender debug logs be viewed? (Choose two.)

  A. /var/lib/twistlock/defender.log

  B. From the Console, Manage > Defenders > Manage > Defenders. Select the Defender from the deployed Defenders list, then click Actions > Logs

  C. From the Console, Manage > Defenders > Deploy > Defenders. Select the Defender from the deployed Defenders list, then click Actions > Logs

  D. /var/lib/twistlock/log/defender.log

  Correct Answer: BD

  Defender Logs Path : /var/lib/twistlock/log/defender.log https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004MjlCAEandlang=en_US%E2%80%A9

  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNWcCAO#:~:text=To%20collect%20Defender's%20debug%20logs,Upload%20log%20to%20Twistlock%20support.

• Question 69:

  Which two actions are required in order to use the automated method within Amazon Web Services (AWS) Cloud to streamline the process of using remediation in the identity and access management (IAM) module? (Choose two.)

  A. Install boto3 and requests library.

  B. Configure IAM Azure remediation script.

  C. Integrate with Azure Service Bus.

  D. Configure IAM AWS remediation script.

  Correct Answer: AD

• Question 70:

  Which two bot types are part of Web Application and API Security (WAAS) bot protection? (Choose two.)

  A. Chat bots

  B. User-defined bots

  C. Unknown bots

  D. Customer bots

  Correct Answer: BC

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/waas_bot_protection