Palo Alto Networks PCCSE Online Practice Questions and Exam Preparation

Palo Alto Networks PCCSE Online Questions & Answers

• Question 81:

  What is required to enable Prisma Cloud Compute Defenders in an AWS Fargate environment?

  A. Deploy a Fargate Defender
  B. Install Prisma Cloud on the host machine
  C. Manually scan Fargate containers
  D. Use IAM roles instead of Defender agents
  A. Deploy a Fargate Defender

  ---

  Explanation

  Fargate Defenders allow Prisma Cloud to monitor and protect serverless containerized applications in AWS Fargate.

• Question 82:

  Which alert deposition severity must be chosen to generate low and high severity alerts in the Anomaly settings when user wants to report on an unknown browser and OS, impossible time travel, or both due to account hijacking attempts?

  A. High
  B. Aggressive
  C. Moderate
  D. Conservative
  B. Aggressive

  ---

  Explanation

  Aggressive:

  For unusual user activity-Report on either unknown location or service, or both to classify an anomaly.

  For account hijacking-Report on unknown browser and Operating System, impossible time travel, or both.

  For anomalous compute provisioning activity-Reports on low and higher severity alerts.

• Question 83:

  Which statement about build and run policies is true?

  A. Build policies enable you to check for security misconfigurations in the IaC templates.
  B. Every type of policy has auto-remediation enabled by default.
  C. The four main types of policies are: Audit Events, Build, Network, and Run.
  D. Run policies monitor network activities in the environment and check for potential issues during runtime.
  A. Build policies enable you to check for security misconfigurations in the IaC templates.

  ---

  Explanation

  A true statement about build and run policies is A. Build policies enable you to check for security misconfigurations in the IaC templates. This capability is crucial for identifying potential security issues early in the development process, allowing for proactive mitigation before deployment, thereby enhancing the overall security posture of the applications and infrastructure being developed.

• Question 84:

  Anomaly policy uses which two logs to identify unusual network and user activity? (Choose two.)

  A. Network ow
  B. Audit
  C. traffic
  D. Users
  A. Network ow
  B. Audit

  ---

  Explanation

  Anomaly policies in Prisma Cloud utilize Network flow logs (A) and Audit logs (B) to identify unusual network and user activities. Network flow logs provide visibility into the traffic flow across the network, helping detect anomalies in communication patterns that might indicate malicious activities or network misconfigurations. Audit logs record user actions within the system, offering insights into potentially unauthorized or suspicious operations that could compromise security. By analyzing these logs, anomaly policies can effectively pinpoint irregularities that deviate from established baselines, enabling timely detection and response to potential security threats.

• Question 85:

  What is the frequency to create a compliance report? (Choose two.)

  A. Weekly
  B. One time
  C. Monthly
  D. Recurring
  B. One time
  D. Recurring

  ---

  Explanation

  In Prisma Cloud, compliance reports can be generated on a one-time basis or on a recurring schedule. The option for a one-time report allows users to generate a specific report instantly based on the current state of the environment. The recurring option enables users to set up automatic generation of reports at regular intervals, such as weekly or monthly, to track compliance over time. This functionality ensures continuous compliance monitoring and helps in maintaining security standards across cloud resources. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/add-a-new-compliance-report

• Question 86:

  A customer wants to prevent public exposure of their S3 buckets in AWS. Which Prisma Cloud feature should they use?

  A. Network segmentation
  B. IAM policies
  C. Configuration policies
  D. Runtime policies
  C. Configuration policies

  ---

  Explanation

  Configuration policies can detect and remediate publicly accessible AWS S3 buckets.

• Question 87:

  Which three steps are involved in onboarding an account for Data Security? (Choose three.)

  A. Create a read-only role with in-line policies
  B. Create a Cloudtrail with SNS Topic
  C. Enable Flow Logs
  D. Enter the RoleARN and SNSARN
  E. Create a S3 bucket
  B. Create a Cloudtrail with SNS Topic
  D. Enter the RoleARN and SNSARN
  E. Create a S3 bucket

  ---

  Explanation

  Onboarding an account for Data Security involves several critical steps to ensure comprehensive coverage and effective monitoring. The steps involved include

  B. Create a Cloudtrail with SNS Topic to track and manage API calls and relevant notifications,

  D. Enter the RoleARN and SNSARN to provide necessary access and integration points for data security functions, and

  E. Create a S3 bucket which serves as a storage solution for logging and data capture essential for security analysis. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security/enable-data-security-module/add-a-new-aws-account.html

• Question 88:

  Which three options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)

  A. Scope - Scans run on a particular host
  B. Credential
  C. Apply rule only when vendor fixes are available
  D. Failure threshold
  E. Grace Period
  C. Apply rule only when vendor fixes are available
  D. Failure threshold
  E. Grace Period

  ---

  Explanation

• Question 89:

  A DevOps team wants to scan Terraform templates for security misconfigurations. Which Prisma Cloud feature should they use?

  A. Code Security
  B. Runtime Policies
  C. Network Security
  D. Incident Response
  A. Code Security

  ---

  Explanation

  Prisma Cloud Code Security scans IaC templates, such as Terraform, for security misconfigurations.

• Question 90:

  What are the subtypes of configuration policies in Prisma Cloud?

  A. Security and Compliance
  B. Build and Deploy
  C. Build and Run
  D. Monitor and Analyze
  C. Build and Run

  ---

  Explanation

  In Prisma Cloud, configuration policies are categorized to align with the different phases of the cloud security lifecycle, emphasizing a holistic approach to cloud security management. The subtypes "Build and Run" encapsulate this approach by covering both the development phase (Build) - where cloud resources and applications are designed and created, and the operational phase (Run) - where these resources and applications are deployed and actively used. This categorization ensures that security and compliance are integral throughout the lifecycle, from the initial creation of cloud infrastructure and applications to their deployment and day-to-day operation, thereby enhancing the overall security posture.