PCCSE by Palo Alto Networks Actual Free Exam Questions And Answers

Question 1

Which of the following are correct statements regarding the use of access keys? (Choose two.)

A. Access keys must have an expiration date

B. Access keys are used for API calls

C. System Admin can create access key for all users

D. Up to two access keys can be active at any time

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

The security team wants to enable the "block" option under compliance checks on the host.
What effect will this option have if it violates the compliance check?

A. Additional hosts will be prevented form starting.

B. Containers on a host will be stopped.

C. The host will be taken offline.

D. No containers will be allowed to start on that host.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Where can Defender debug logs be viewed? (Choose two.)

A. From the Console, Manage > Defenders > Deploy > Defenders. Select the Defender from the deployed Defenders list, then click Actions > Logs

B. From the Console, Manage > Defenders > Manage > Defenders. Select the Defender from the deployed Defenders list, then click Actions > Logs

C. /var/lib/twistlock/log/defender.log

D. /var/lib/twistlock/defender.log

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

How does assigning an account group to an administrative user on Prisma Cloud help restrict access to resources?

A. It restricts access only to certain types of resources within the cloud account.

B. It does not restrict access to any resources within the cloud account.

C. It restricts access only to the resources and data that pertains to the cloud account(s) within an account group.

D. It restricts access to all resources and data within the cloud account.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

A. config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

B. config where api.name = 'aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

C. config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"

D. config from network where api.name = 'aws-iam-get-credential-report' AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Which two of the following are required to be entered on the IdP side when setting up SSO in Prisma Cloud?
(Choose two.)

A. SSO Certificate

B. Username

C. SP (Service Provider) Entity ID

D. Assertion Consumer Service (ACS) URL

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which two integrations enable ingesting host findings to generate alerts? (Choose two.)

A. Qualys

B. Tenable

C. Splunk

D. JIRA

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

An administrator sees that a runtime audit has been generated for a container.
The audit message is:
"/bin/ls launched and is explicitly blocked in the runtime rule. Full command: ls -latr" Which protection in the runtime rule would cause this audit?

A. File systems

B. Networking

C. Container

D. Processes

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

Which alert deposition severity must be chosen to generate low and high severity alerts in the Anomaly settings when user wants to report on an unknown browser and OS, impossible time travel, or both due to account hijacking attempts?

A. Aggressive

B. Moderate

C. Conservative

D. High

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Palo Alto Networks Prisma Certified Cloud Security Engineer - PCCSE Exam Practice Test

Contact Us

Useful Links

Latest Updated