Palo Alto Networks CloudSec-Pro - Palo Alto Networks Cloud Security Professional Exam
Page: 3 / 12
Total 60 questions
Question #11 (Topic: Exam A)
A threat intelligence team determines that IP addresses associated with brute force attacks on the VPN gateways are historically linked to a ransomware campaign.
Which two features can be defined in Cortex to trigger alerts on the malicious objects and on specified system processes linked to the tactics, techniques, and procedures (TTPs) of the threat actors? (Choose two.)
Which two features can be defined in Cortex to trigger alerts on the malicious objects and on specified system processes linked to the tactics, techniques, and procedures (TTPs) of the threat actors? (Choose two.)
A. External dynamic list
B. Security event anomaly
C. Behavioral indicator of compromise (BIOC)
D. Indicator of compromise (IOC)
Answer: CD
Question #12 (Topic: Exam A)
Which operational status will identify all endpoints with agents that are not functioning properly due to insufficient resources?
A. Unprotected
B. Not Protected
C. Limited Protection
D. Local Resource Impact
Answer: D
Question #13 (Topic: Exam A)
Which Cortex Cloud capability will increase efficiency when prioritizing and categorizing issues?
A. SmartScore
B. Manual tagging
C. SmartGrouping
D. Static threshold
Answer: C
Question #14 (Topic: Exam A)
A developer writes a serverless application to extract a field from a file in an S3 bucket. The Lambda function is assigned the S3FullAccess managed policy.
Refer to the scenario to answer this question:
Which two actions will allow a Cortex Cloud user to view the effective permissions of the Lambda function? (Choose two.)
Refer to the scenario to answer this question:
Which two actions will allow a Cortex Cloud user to view the effective permissions of the Lambda function? (Choose two.)
A. Opening the Identity dashboard, filtering for serverless functions, opening the function and clicking on “Access”
B. Viewing all Compute assets and applying the Serverless = Yes filter in the inventory
C. Viewing the Access tab in the non-human identities inventory
D. Selecting the Access tab in the serverless function inventory after selecting the function
Answer: CD
Question #15 (Topic: Exam A)
Which Cortex Cloud report is most appropriate for a cybersecurity director to receive critical and high compliance risks for AWS?
A. Cloud Risk
B. Asset Inventory
C. Cloud Security Assessment
D. Intelligence Assessment
Answer: C
