PCCSE PDF Exam Material 2022 Realistic PCCSE Dumps Questions [Q56-Q77] : Best Free Exam Guide : http://free.exams4sures.com

NO.56 Which three types of bucket exposure are available in the Data Security module? (Choose three.)

Differential

Public

Conditional

Private

International

NO.57 Which two processes ensure that builds can function after a Console upgrade? (Choose two )

updating any build environments that have twistcli included to use the latest version

configuring build pipelines to download twistcli at the start of each build

creating a new policy that allows older versions of twistcli to connect the Console

allowing Jenkins to automatically update the plugin

NO.58 The security team wants to protect a web application container from an SQLi attack. Which type of policy should the administrator create to protect the container?

CNAF

Runtime

Compliance

CNNF

NO.59 Which statement is true about obtaining Console images for Prisma Cloud Compute Edition’?
To retrieve Prisma Cloud Console images using URL auth;

1 Access registry-urt-auth twistlock com, and authenticate using the user certificate
2. Retrieve the Prisma Cloud Console images using ‘docker pull’
To retrieve Prisma Cloud Console images using basic auth:

1. Access registry twistlock com. and authenticate using ‘docker login’
2 Retrieve the Prisma Cloud Console images using “docker pull’
To retrieve Prisma Cloud Console images using URL auth

1 Access registry-auth.twistlock com and authenticate using the user certificate
2. Retrieve the Prisma Cloud Console images using ‘docker pull’
To retrieve Prisma Cloud Console images using basic auth

1 Access registry paloaltonetworks com. and authenticate using ‘docker login’
2 Retrieve the Prisma Cloud Console images using ‘docker pull’

NO.60 Which three steps are involved in onboarding an account for Data Security? (Choose three.)

Create a read-only role with in-line policies

Create a Cloudtrail with SNS Topic

Enable Flow Logs

Enter the RoleARN and SNSARN

Create a S3 bucket

NO.61 Which container image scan is constructed correctly?

twistcli images scan –docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/ latest

twistcli images scan –address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest

twistcli images scan –address https://us-west1.cloud.twistlock.com/us-3-123456789 –container myimage/ latest

twistcli images scan –address https://us-west1.cloud.twistlock.com/us-3-123456789 –container myimage/ latest –details

NO.62 A customer does not want alerts to be generated from network traffic that originates from trusted internal networks.
Which setting should you use to meet this customer’s request?

Trusted Login IP Addresses

Anomaly Trusted List

Trusted Alert IP Addresses

Enterprise Alert Disposition

NO.63 An administrator wants to enforce a rate limit for users not being able to post five (5) .tar.gz files within five (5) seconds.
What does the administrator need to configure?

A ban for DoS protection with an average rate of 5 and file extensions match on .tar.gz on WAAS

A ban for DoS protection with a burst rate of 5 and file extensions match on .tar.gz on CNNF

A ban for DoS protection with a burst rate of 5 and file extensions match on .tar gz on WAAS

A ban for DoS protection with an average rate of 5 and file extensions match on .tar.gz on CNNF

NO.64 A customer has serverless functions that are deployed in multiple clouds.
Which serverless cloud provider is covered be “overly permissive service access” compliance check?

Alibaba

GCP

AWS

Azure

NO.65 Which statement is true regarding CloudFormation templates?

Scan support does not currently exist tor nested references, macros, or intrinsic functions.

A single template or a zip archive of template files cannot be scanned with a single API request.

Scan support is provided for JSON. HTML and YAML formats.

Request-Header-Field ‘cloudformation-version’ is required to request a scan.

NO.66 Per security requirements, an administrator needs to provide a list of people who are receiving e-mails for Prisma Cloud alerts.
Where can the administrator locate this list of e-mail recipients?

Target section within an Alert Rule.

Notification Template section within Alerts.

Users section within Settings.

Set Alert Notification section within an Alert Rule.

NO.67 Which two IDE plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.)

BitBucket

Visual Studio Code

CircleCI

IntelliJ

NO.68 You are an existing customer of Prisma Cloud Enterprise. You want to onboard a public cloud account and immediately see all of the alerts associated with this account based off ALL of your tenant’s existing enabled policies. There is no requirement to send alerts from this account to a downstream application at this time.
Which option shows the steps required during the alert rule creation process to achieve this objective?

Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select “select all policies” checkbox as part of the alert rule Confirm the alert rule

Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select one or more policies checkbox as part of the alert rule Confirm the alert rule

Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select one or more policies as part of the alert rule Add alert notifications Confirm the alert rule

Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert rule Select “select all policies” checkbox as part of the alert rule Add alert notifications Confirm the alert rule

NO.69 Which component(s), if any will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?

Defenders

twistcli

Console

Jenkins

NO.70 The security team wants to enable the “block” option under compliance checks on the host.
What effect will this option have if it violates the compliance check?

The host will be taken offline.

Additional hosts will be prevented form starting.

Containers on a host will be stopped.

No containers will be allowed to start on that host.

NO.71 A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.
Which port should the team specify in the CNAF rule to protect the application?

443

8080

8888

NO.72 Which statement is true about obtaining Console images for Prisma Cloud Compute Edition?

To retrieve Prisma Cloud Console images using basic auth:
1.Access registry.paloaltonetworks.com, and authenticate using ‘docker login’.
2.Retrieve the Prisma Cloud Console images using ‘docker pull’.

To retrieve Prisma Cloud Console images using basic auth:
1.Access registry.twistlock.com, and authenticate using ‘docker login’.
2.Retrieve the Prisma Cloud Console images using ‘docker pull’.

To retrieve Prisma Cloud Console images using URL auth:
1.Access registry-url-auth.twistlock.com, and authenticate using the user certificate.
2.Retrieve the Prisma Cloud Console images using ‘docker pull’.

To retrieve Prisma Cloud Console images using URL auth:
1.Access registry-auth.twistlock.com, and authenticate using the user certificate.
2.Retrieve the Prisma Cloud Console images using ‘docker pull’.

NO.73 Which option identifies the Prisma Cloud Compute Edition?

Plugin to Prisma Cloud

Downloadable, self-hosted software

Software-as-a-Service (SaaS)

Package installed with APT

NO.74 A customer wants to harden its environment from misconfiguration.
Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

Docker daemon configuration

Host cloud provider tags

Host configuration

Docker daemon configuration files

Hosts without Defender agents

NO.75 The administrator wants to review the Console audit logs from within the Console.
Which page in the Console should the administrator use to review this data, if it can be reviewed at all?

Navigate to Monitor > Events > Host Log Inspection

The audit logs can be viewed only externally to the Console

Navigate to Manage > Defenders > View Logs

Navigate to Manage > View Logs > History

NO.76 A customer wants to scan a serverless function as part of a build process. Which twistcli command can be used to scan serverless functions?

twistcli function scan <SERVERLESS_FUNCTION.ZIP>

twistcli scan serverless <SERVERLESS_FUNCTION.ZIP>

twistcli serverless AWS <SERVERLESS_FUNCTION.ZIP>

twiscli serverless scan <SERVERLESS_FUNCTION.ZIP>

NO.77 An administrator sees that a runtime audit has been generated for a Container. The audit message is “DNS resolution of suspicious name wikipedia.com. type A”.
Why would this message appear as an audit?

The DNS was not learned as part of the Container model or added to the DNS allow list.

This is a DNS known to be a source of malware.

The process calling out to this domain was not part of the Container model.

The Layer7 firewall detected this as anomalous behavior.