Practice PCCSE Exam Online

Question 1

Which two filters are available in the SecOps dashboard? (Choose two.)

A : Time range

B : Account Groups

C : Service Name

D : Cloud Region

Answer: A,B

Question 2

A customer has a requirement to restrict any container from resolving the name www.evil-url.com.

How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

A : Choose ''copy into rule'' for any Container, set www.evil-url.com as a blocklisted DNS name in the Container policy and set the policy effect to alert.

B : Set www.evil-url.com as a blocklisted DNS name in the default Container runtime policy, and set the effect to block.

C : Choose ''copy into rule'' for any Container, set www.evil-url.com as a blocklisted DNS name, and set the effect to prevent.

D : Set www.evil-url.com as a blocklisted DNS name in the default Container policy and set the effect to prevent.

Answer: A

Question 3

A customer has serverless functions that are deployed in multiple clouds.

Which serverless cloud provider is covered be ''overly permissive service access'' compliance check?

A : Alibaba

B : GCP

C : AWS

D : Azure

Answer: C

Question 4

Which two information types cannot be seen in the data security dashboard? (Choose two.)

A : Top Publicly Exposed Objects By Data Profile

B : Bucket owner

C : Object content

D : Total objects

E : Object Data Profile by Region

Answer: B,C

Question 5

Review this admission control policy:

match[{'msg': msg}] { input.request.operation == 'CREATE' input.request.kind.kind == 'Pod' input.request.resource.resource == 'pods'

input.request.object.spec.containers[_].securityContext.privileged msg := 'Privileged'

}

Which response to this policy will be achieved when the effect is set to ''block''?

A : The policy will block all pods on a Privileged host.

B : The policy will replace Defender with a privileged Defender.

C : The policy will alert only the administrator when a privileged pod is created.

D : The policy will block the creation of a privileged pod.

Answer: C

Name:	Prisma Certified Cloud Security Engineer
Exam Code:	PCCSE
Certification:	Paloalto Networks
Vendor:	Palo Alto Networks
Total Questions:	250
Last Updated:	Apr 25, 2024

Palo Alto Networks PCCSE