Palo Alto Networks PCCSE - Prisma Certified Cloud Security Engineer Exam
Page: 3 / 51
Total 252 questions
Question #11 (Topic: Single Topic)
A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)
Which two reasons explain this change in alert status? (Choose two.)
A. user manually changed the alert status.
B. policy was changed.
C. resource was deleted.
D. alert was sent to an external integration.
Answer: CD
Question #12 (Topic: Single Topic)
Which three steps are involved in onboarding an account for Data Security? (Choose three.)
A. Create a read-only role with in-line policies
B. Create a Cloudtrail with SNS Topic
C. Enable Flow Logs
D. Enter the RoleARN and SNSARN
E. Create a S3 bucket
Answer: BDE
Question #13 (Topic: Single Topic)
An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough
mode to listen on the same ports as the default Prisma Compute Console configuration.
In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS.
Which port will twistcli need to use to access the Prisma Compute APIs?
mode to listen on the same ports as the default Prisma Compute Console configuration.
In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS.
Which port will twistcli need to use to access the Prisma Compute APIs?
A. 8084
B. 443
C. 8083
D. 8081
Answer: A
Question #14 (Topic: Single Topic)
A customer is reviewing Container audits, and an audit has identified a cryptominer attack.
Which three options could have generated this audit? (Choose three.)
Which three options could have generated this audit? (Choose three.)
A. The value of the mined currency exceeds $100.
B. High CPU usage over time for the container is detected.
C. Common cryptominer process name was found.
D. The mined currency is associated with a user token.
E. Common cryptominer port usage was found.
Answer: BCE
Question #15 (Topic: Single Topic)
Which step is included when configuring Kubernetes to use Prisma Cloud Compute as an admission controller?
A. copy the Console address and set the config map for the default namespace.
B. create a new namespace in Kubernetes called admission-controller.
C. enable Kubernetes auditing from the Defend > Access > Kubernetes page in the Console.
D. copy the admission controller configuration from the Console and apply it to Kubernetes.
Answer: B
