Palo Alto Networks PCCSE Dumps Questions [2022] Pass for PCCSE Exam [Q39-Q61]

Q39. An administrator has a requirement to ingest all Console and Defender logs to Splunk.
Which option will satisfy this requirement in Prisma Cloud Compute?

Q40. A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)

Q41. You wish to create a custom policy with build and run subtypes. Match the query types for each example.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

Q42. A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed.
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

Q43. A customer has a requirement to restrict any container from resolving the name www.evil-url.com.
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

Q44. Which two attributes of policies can be fetched using API? (Choose two.)

Q45. Order the steps involved in onboarding an AWS Account for use with Data Security feature.

Q46. A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)

Q47. Which method should be used to authenticate to Prisma Cloud Enterprise programmatically?

Q48. Which statement accurately characterizes SSO Integration on Prisma Cloud?

Q49. Which options show the steps required to upgrade Console when using projects?

Q50. Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

Q51. Which three types of classifications are available in the Data Security module? (Choose three. )

Q52. Which three types of classifications are available in the Data Security module? (Choose three.)

Q53. Which intensity setting for anomaly alerts is used for the measurement of 100 events over 30 days?

Q54. A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment.
Which action needs to be set for “do not use privileged containers”?

Q55. Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

Q56. An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same ports as the default Prisma Compute Console configuration.
In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS. Which port will twistcli need to use to access the Prisma Compute APIs?

Q57. The security team wants to protect a web application container from an SQLi attack? Which type of policy should the administrator create to protect the container?

Q58. The development team wants to fail CI jobs where a specific CVE is contained within the image. How should the development team configure the pipeline or policy to produce this outcome?

Q59. Which three Options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)

Q60. An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console on the default service endpoint and will be exporting to YAML Console Address SCONSOLE_ADDRESS Websocket Address SWEBSOCKHT_ADDRESS User: SADMIN USER Which command generates the YAML file for Defender install?
A)

B)

C)

D)

Q61. What is the maximum number of access keys a user can generate in Prisma Cloud with a System Admin role?