Palo Alto Networks Cloud Security Professional (CloudSec-Pro) Free Practice Test

Question 1

In Prisma Cloud for Azure Net Effective Permissions Calculation, the following Azure permission levels are supported by which three permissions? (Choose three).

A. Management Group

B. Subscription

C. Resources

D. Tenant

E. Resource groups

Correct Answer: A,B,C

Question 2

When configuring SSO how many IdP providers can be enabled for all the cloud accounts monitored by Prisma Cloud?

A. 4

B. 3

C. 1

D. 2

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

In Prisma Cloud Software Release 22.06 (Kepler), which Registry type is added?

A. Azure Container Registry

B. Google Artifact Registry

C. IBM Cloud Container Registry

D. Sonatype Nexus

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What is the primary function of the Palo Alto Networks Prisma Cloud?

A. Cloud-native security

B. Firewall protection

C. Virtual private network

D. Endpoint detection and response

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which Cortex Cloud capability will increase efficiency when prioritizing and categorizing issues?

A. SmartGrouping

B. Manual tagging

C. SmartScore

D. Static threshold

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

A customer wants to harden its environment from misconfiguration. Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

A. Hosts without Defender agents

B. Host configuration

C. Host cloud provider tags

D. Docker daemon configuration files

E. Docker daemon configuration

Correct Answer: B,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which options show the steps required after upgrade of Console?

A. Update the Console image in the Twistlock hosted registry Update the Defender image in the Twistlock hosted registry Uninstall Defenders

B. Update the Console image in the Twistlock hosted registry Update the Defender image in the Twistlock hosted registry Redeploy Console

C. Upgrade Defenders Upgrade Jenkins Plugin Upgrade twistcli where applicable

D. Uninstall Defenders Upgrade Jenkins PluginUpgrade twistcli where applicableAllow the Console to redeploy the Defender

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

The administrator wants to review the Console audit logs from within the Console. Which page in the Console should the administrator use to review this data, if it can be reviewed at all?

A. Navigate to Manage > Defenders > View Logs

B. Navigate to Monitor > Events > Host Log Inspection

C. The audit logs can be viewed only externally to the Console

D. Navigate to Manage > View Logs > History

Correct Answer: D

Question 9

Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in Azure cloud? (Choose two.)

A. YOUR_ACCOUNT_NUMBER

B. API_ENDPOINT

C. SB_QUEUE_KEY

D. SQS_QUEUE_NAME

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

A company intends to deploy an Amazon EKS cluster to migrate its current application to a containerized design pattern. The application resides on dedicated servers and is always online, and any amount of downtime will be costly. There is currently no security visibility into either environment. Which strategy should be implemented to achieve the company's goal?

A. Install the Cortex XDR pro agent on the current environment and schedule downtime to configure the agent for the new environment.

B. Deploy Kubernetes Connectors on the current environment and the new environment for the transition.

C. Ensure agentless scanning and visibility is scoped for both environments and maintained during the transition.

D. Install the Cortex XDR agent for cloud on the current environment, and schedule downtime to configure the agent for the new environment.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Which three options are selectable in a CI policy for image scanning with Jenkins or twistcli?
(Choose three.)

A. Credential

B. Grace Period

C. Scope - Scans run on a particular host

D. Failure threshold

E. Apply rule only when vendor fixes are available

Correct Answer: C,D,E

Welcome to TestSimulate

Palo Alto Networks Cloud Security Professional (CloudSec-Pro) Free Practice Test