[Sep-2021] Pass Palo Alto Networks PCCSE Exam in First Attempt Guaranteed!

Full PCCSE Practice Test and 87 unique questions with explanations waiting just for you, get it now!

NEW QUESTION 40
A customer wants to harden its environment from misconfiguration.
Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

• A. Hosts without Defender agents
• B. Host cloud provider tags
• C. Docker daemon configuration files
• D. Docker daemon configuration
• E. Host configuration

Answer: B,D,E

 

NEW QUESTION 41
A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)

• A. user manually changed the alert status.
• B. resource was deleted.
• C. policy was changed.
• D. alert was sent to an external integration.

Answer: B,D

 

NEW QUESTION 42
What is the behavior of Defenders when the Console is unreachable during upgrades?

• A. Defenders will fail closed until the web-socket can be re-established
• B. Defenders will fail open until the web-socket can be reestablished.
• C. Defenders continue to alert, but not enforce, using the policies and settings most recently cached before upgrading the Console.
• D. Defenders continue to alert and enforce using the policies and settings most recently cached before upgrading the Console.

Answer: D

 

NEW QUESTION 43
Which "kind" of Kubernetes object that is configured to ensure that Defender is acting as the admission controller?

• A. DestinationRules
• B. PodSecurityPolicies
• C. ValidatingWebhookConfiguration
• D. MutatingWebhookConfiguration

Answer: D

 

NEW QUESTION 44
A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can be performed by the Terraform script? (Choose two.)

• A. publish the flow log to a storage bucket.
• B. enable flow logs for Prisma Cloud.
• C. enable the required APIs for Prisma Cloud.
• D. create the Prisma Cloud role.

Answer: B,C

 

NEW QUESTION 45
Which three Options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)

• A. Credential
• B. Scope - Scans run on a particular host
• C. Grace Period
• D. Apply rule only when vendor fixes are available
• E. Failure threshold

Answer: A,B,D

 

NEW QUESTION 46
The InfoSec team wants to be notified via email each time a Security Group is misconfigured Which Prisma Cloud tab should you choose to complete this request?

• A. Alert Rules
• B. Policies
• C. Events
• D. Notifications

Answer: B

 

NEW QUESTION 47
A customer has Prisma Cloud Enterprise and host Defenders deployed
What are two options that allow an administrator to upgrade Defenders'? (Choose two )

• A. with auto-upgrade, the host Defender will auto-upgrade.
• B. generate a new DaemonSet file
• C. click the update button in the web-interface
• D. auto deploy the Lambda Defender

Answer: A,B

 

NEW QUESTION 48
An organization wants to be notified immediately to any "High Seventy" alerts for the account group
"Clinical Trials" via Slack Which option shows the steps should the organization can use to achieve this goal?

• A. 1. Under the "Select Policies" tab filter on seventy and select "High"
  2. Under the Set Alert Notification tab choose Slack and populate the
  3. Set Frequency to "As it Happens"
  4. Configure Slack Integration
  5. Create an Alert rule
• B. 1. Create an alert rule and select "Clinical Trials" as the account group
  2. Under the "Select Policies" tab filter on seventy and select "High"
  3. Under the Set Alert Notification tab choose Slack and populate the channel
  4. Set Frequency to "As it Happens"
  5. Set up the Slack Integration to complete the configuration
• C. 1. Configure Slack Integration
  2 Create an alert rule and select "Clinical Trials" as the account group
  3. Under the "Select Policies" tab filter on seventy and select "High"
  4. Under the Set Alert Notification tab choose Slack and populate the channel
  5. Set Frequency to "As it Happens"
• D. 1 Configure Slack Integration
  2. Create an alert rule
  3. Under the "Select Policies" tab, filter on seventy and select "High"
  4. Under the Set Alert Notification tab- choose Slack and populate the channel
  5. Set Frequency to "As it Happens"

Answer: C

 

NEW QUESTION 49
An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same ports as the default Prisma Compute Console configuration.
In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS. Which port will twistcli need to use to access the Prisma Compute APIs?

• A. 0
• B. 1
• C. 2
• D. 3

Answer: C

 

NEW QUESTION 50
The administrator wants to review the Console audit logs from within the Console.
Which page in the Console should the administrator use to review this data, if it can be reviewed at all?

• A. Navigate to Manage > Defenders > View Logs
• B. Navigate to Monitor > Events > Host Log Inspection
• C. The audit logs can be viewed only externally to the Console
• D. Navigate to Manage > View Logs > History

Answer: D

 

NEW QUESTION 51
A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which three options could have generated this audit? (Choose three.)

• A. The value of the mined currency exceeds $100.
• B. The mined currency is associated with a user token.
• C. Common cryptominer process name was found.
• D. Common cryptominer port usage was found.
• E. High CPU usage over time for the container is detected.

Answer: B,C,E

 

NEW QUESTION 52
Match the correct scanning mode for each given operation.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

Answer:

Explanation:

 

NEW QUESTION 53
What is an example of an outbound notification within Prisma Cloud?

• A. PagerDuty
• B. Qualys
• C. Tenable
• D. AWS Inspector

Answer: A

 

NEW QUESTION 54
How are the following categorized?
* Backdoor account access
* Hijacked processes
* Lateral movement
* Port scanning

• A. audits
• B. models
• C. incidents
• D. admission controllers

Answer: A

 

NEW QUESTION 55
Match the service on the right that evaluates each exposure type on the left.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

Answer:

Explanation:

Reference:
https://www.paloaltonetworks.com/prisma/cloud/cloud-data-security

 

NEW QUESTION 56
An administrator sees that a runtime audit has been generated for a Container The audit message is DNS resolution of suspicious name wikipedia.com. type A".
Why would this message appear as an audit?

• A. The Layer7 firewall detected this as anomalous behavior
• B. This is a DNS known to be a source of malware
• C. The process calling out to this domain was not part of the Container model.
• D. The DNS was not learned as part of the Container model or added to the DNS allow list

Answer: B

 

NEW QUESTION 57
An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise tenant.
In which order will the APIs be executed for this service?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

Answer:

Explanation:

 

NEW QUESTION 58
An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console on the default service endpoint and will be exporting to YAML.
Console Address: $CONSOLE_ADDRESS Websocket Address: $WEBSOCKET_ADDRESS User: $ADMIN_USER Which command generates the YAML file for Defender install?

• A. <PLATFORM>/twistcli defender YAML kubernetes \
  --address $CONSOLE_ADDRESS \
  --user $ADMIN_USER \
  --cluster-address $WEBSOCKET_ADDRESS
• B. <PLATFORM>/twistcli defender \
  --address $CONSOLE_ADDRESS \
  --user $ADMIN_USER \
  --cluster-address $CONSOLE_ADDRESS
• C. <PLATFORM>/twistcli defender export kubernetes \
  --address $WEBSOCKET_ADDRESS \
  --user $ADMIN_USER \
  --cluster-address $CONSOLE_ADDRESS
• D. <PLATFORM>/twistcli defender export kubernetes \
  --address $CONSOLE_ADDRESS \
  --user $ADMIN_USER \
  --cluster-address $WEBSOCKET_ADDRESS

Answer: D

 

NEW QUESTION 59
Which component(s), if any will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?

• A. Jenkins
• B. twistcli
• C. Console
• D. Defenders

Answer: B

 

NEW QUESTION 60
......

Get Latest PCCSE Dumps Exam Questions in here: https://www.testsimulate.com/PCCSE-study-materials.html