Palo Alto Networks Palo Alto Networks Certifications PCCSE Questions & Answers

• Question 81:

  In Prisma Cloud Software Release 22.06 (Kepler), which Registry type is added?

  A. Azure Container Registry

  B. Google Artifact Registry

  C. IBM Cloud Container Registry

  D. Sonatype Nexus

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-06/prisma-cloud-compute-edition-release-notes/release-information/release-notes-22-06

• Question 82:

  Web-Application and API Security (WAAS) provides protection for which two protocols? (Choose two.)

  A. HTTP

  B. SSH

  C. Tomcat Web Connector via AJP

  D. TLS

  Correct Answer: AD

• Question 83:

  What is the most reliable and extensive source for documentation on Prisma Cloud APIs?

  A. prisma.pan.dev

  B. docs.paloaltonetworks.com

  C. Prisma Cloud Administrator's Guide

  D. Live Community

  Correct Answer: A

  https://prisma.pan.dev/api/cloud/

• Question 84:

  Which RQL query type is invalid?

  A. Event

  B. IAM

  C. Incident

  D. config

  Correct Answer: C

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql

• Question 85:

  On which cloud service providers can you receive new API release information for Prisma Cloud?

  A. AWS, Azure, GCP, Oracle, IBM

  B. AWS, Azure, GCP, Oracle, Alibaba

  C. AWS, Azure, GCP, IBM

  D. AWS, Azure, GCP, IBM, Alibaba

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-release-notes/prisma-cloud-release-information

• Question 86:

  Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster. Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?

  A. From the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.

  B. From the deployment page Configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.

  C. From the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.

  D. From the deployment page in Console, choose twistlock-console for Console identifier, and run the curl | bash script on the master Kubernetes node.

  Correct Answer: C

• Question 87:

  During an initial deployment of Prisma Cloud Compute, the customer sees vulnerabilities in their environment. Which statement correctly describes the default vulnerability policy?

  A. It blocks all containers that contain a vulnerability.

  B. It alerts on any container with more than three critical vulnerabilities.

  C. It blocks containers after 30 days if they contain a critical vulnerability.

  D. It alerts on all vulnerabilities, regardless of severity.

  Correct Answer: D

• Question 88:

  The security team wants to enable the "block" option under compliance checks on the host. What effect will this option have if it violates the compliance check?

  A. The host will be taken o ine.

  B. Additional hosts will be prevented form starting.

  C. Containers on a host will be stopped.

  D. No containers will be allowed to start on that host.

  Correct Answer: D

  When compliance rules are configured with block actions, they are enforced when a container is created. If the instantiated container violates your policy, Prisma Cloud prevents the container from being created.

• Question 89:

  Which two required request headers interface with Prisma Cloud API? (Choose two.)

  A. Content-type:application/json

  B. x-redlock-auth

  C. >x-redlock-request-id

  D. Content-type:application/xml

  Correct Answer: AB

• Question 90:

  An administrator has a requirement to ingest all Console and Defender logs to Splunk. Which option will satisfy this requirement in Prisma Cloud Compute?

  A. Enable the API settings for logging.

  B. Enable the CSV export in the Console.

  C. Enable the syslog option in the Console

  D. Enable the Splunk option in the Console.

  Correct Answer: C