PCCSE Paloalto-Networks Exam Questions and Free Practice Test

Question 7

Which three steps are involved in onboarding an account for Data Security? (Choose three.)

A. Create a read-only role with in-line policies

B. Create a Cloudtrail with SNS Topic

C. Enable Flow Logs

D. Enter the RoleARN and SNSARN

E. Create a S3 bucket

Correct Answer:BCE

Question 8

Per security requirements, an administrator needs to provide a list of people who are receiving e-mails for Prisma Cloud alerts.
Where can the administrator locate this list of e-mail recipients?

A. Target section within an Alert Rule.

B. Notification Template section within Alerts.

C. Users section within Settings.

D. Set Alert Notification section within an Alert Rule.

Correct Answer:A

Question 9

Which port should a security team use to pull data from Console’s API?

A. 53

B. 25

C. 8084

D. 8083

Correct Answer:D

Question 10

A customer has a requirement to automatically protect all Lambda functions with runtime protection. What is the process to automatically protect all the Lambda functions?

A. Configure a function scan policy from the Defend/Vulnerabilities/Functions page.

B. Configure serverless radar from the Defend/Compliance/Cloud Platforms page.

C. Configure a manually embedded Lambda Defender.

D. Configure a serverless auto-protect rule for the functions.

Correct Answer:D

Question 11

The development team wants to block Cross Site Scripting attacks from pods in its environment. How should the team construct the CNAF policy to protect against this attack?

A. create a Host CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to “prevent”.

B. create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to alert.

C. create a Container CNAF policy, targeted at a specific resource, check the box for XSS protection, and set the action to prevent.

D. create a Container CNAF policy, targeted at a specific resource, and they should set “Explicitly allowed inbound IP sources” to the IP address of the pod.

Correct Answer:A

Question 12

A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed.
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

A. set the Container model to manual relearn and set the default runtime rule to block for process protection.

B. set the Container model to relearn and set the default runtime rule to prevent for process protection.

C. add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list, and set the action to “prevent”.

D. choose “copy into rule” for the Container, add a ransomWare process into the denied process list, and set the action to “block”.

Correct Answer:C

START PCCSE EXAM