Palo-Alto-Networks PCCSE Practice Exam Questions

Palo-Alto-Networks PCCSE Sample Question Answers

Question # 1

Which IAM RQL query would correctly generate an output to view users who enabled console accesswith both access keys and passwords?

A. config from network where api.name = "˜aws-iam-get-credential-report"™ AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"
B. config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule =access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"
C. config from cloud.resource where api.name = 'aws-iam-get-credential-report"™ AND json.rule =access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"
D. config where api.name = "˜aws-iam-get-credential-report' AND json.rule= access_key_1_active istrue or access_key_2_active is true and password_enabled equals "true"

Show Answer

Question # 2

Which two CI/CD plugins are supported by Prisma Cloud as part of its Code Security? (Choose two.) 

A. Checkov 
B. Visual Studio Code 
C. CircleCI 
D. IntelliJ 

Show Answer

Question # 3

Which two statements explain differences between build and run config policies? (Choose two.)

A. Run and Network policies belong to the configuration policy set. 
B. Build policies allow checking for security misconfigurations in the IaC templates and ensure these issues do not get into production. 
C. Run policies monitor network activities in the environment and check for potential issues during runtime. 
D. Run policies monitor resources and check for potential issues after these cloud resources are deployed. 

Show Answer

Question # 4

Which of the following is a reason for alert dismissal? 

A. SNOOZED_AUTO_CLOSE 
B. ALERT_RULE_ADDED 
C. POLICY_UPDATED 
D. USER_DELETED 

Show Answer

Question # 5

Where can a user submit an external new feature request?

A. Aha 
B. Help Center 
C. Support Portal 
D. Feature Request 

Show Answer

Question # 6

A customer's Security Operations Center (SOC) team wants to receive alerts from Prisma Cloud viaemail once a day about all policies that have a violation, rather than receiving an alert every time a new violation occurs.Which alert rule configuration meets this requirement?

A. Configure an alert rule with all the defaults except selecting email within the "Alert Notifications" tab and specifying recipient. 
B. Configure an alert rule. Under the "Policies" tab, select "High Risk Severity Policies." In the "SetAlert Notifications" tab, select "Email > Recurring," set to repeat every 1 day, and enable "Email."
C. Set up email integrations under the "Integrations" tab in "Settings" and create a notification template. 
D. Configure an alert rule. Under the "Policies" tab, select "All Policies." In the "Set AlertNotifications" tab, select "Email > Recurring," set to repeat every 1 day, and then enable "Email."

Show Answer

Question # 7

Which report includes an executive summary and a list of policy violations, including a page with details for each policy?

A. Compliance Standard 
B. Business Unit 
C. Cloud Security Assessment 
D. Detailed 

Show Answer

Question # 8

Creation of a new custom compliance standard that is based on other individual custom compliancestandards needs to be automated.Assuming the necessary data from other standards has been collected, which API order should beused for this new compliance standard?

A. 1) https://api.prismacloud.io/compliance/add2) https://api.prismacloud.io/compliance/requirementld/section3) https://api.prismacloud.io/compliance/complianceld/requirement
B. 1) https://api.prismacloud.io/compliance2) https://api.prismacloud.io/compliance/complianceld/requirement3) https://api.prismacloud.io/compliance/requirementld/section
C. 1) https://api.prismacloud.io/compliance/add2) https://api.prismacloud.io/compliance/complianceld/requirement3) https://api.prismacloud.io/compliance/requirementld/section
D. 1) https://api.prismacloud.io/compliance2) https://api.prismacloud.io/compliance/requirementld/section3) https://api.prismacloud.io/compliance/complianceld/requirement

Show Answer

Question # 9

Which three options for hardening a customer environment against misconfiguration are included in Prisma Cloud Compute compliance enforcement for hosts? (Choose three.)

A. Serverless functions 
B. Docker daemon configuration 
C. Cloud provider tags 
D. Host configuration 
E. Hosts without Defender agents 

Show Answer

Question # 10

Which three Orchestrator types are supported when deploying Defender? (Choose three.) 

A. Red Hat OpenShift 
B. Amazon ECS 
C. Docker Swarm 
D. Azure ACS 
E. Kubernetes 

Show Answer