Palo Alto Networks PCCSE Exam Practice Questions (P. 1)
- Full Access (252 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #1
Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default.
Where should the customer navigate in Console?
Where should the customer navigate in Console?
- AMonitor > ComplianceMost Voted
- BDefend > Compliance
- CManage > Compliance
- DCustom > Compliance
Correct Answer:
B
Reference:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/manage_compliance.html
B
Reference:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/compliance/manage_compliance.html
send
light_mode
delete
Question #2
Which container scan is constructed correctly?
- Atwistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 --container myimage/latest
- Btwistcli images scan --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
- Ctwistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 --details myimage/latestMost Voted
- Dtwistcli images scan -u api -p api --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
Correct Answer:
B
B
send
light_mode
delete
Question #3
The development team wants to fail CI jobs where a specific CVE is contained within the image.
How should the development team configure the pipeline or policy to produce this outcome?
How should the development team configure the pipeline or policy to produce this outcome?
- ASet the specific CVE exception as an option in Jenkins or twistcli.
- BSet the specific CVE exception as an option in Defender running the scan.
- CSet the specific CVE exception as an option using the magic string in the Console.
- DSet the specific CVE exception in Console's CI policy.Most Voted
Correct Answer:
C
C
send
light_mode
delete
Question #4
Which three types of classifications are available in the Data Security module? (Choose three.)
- APersonally identifiable informationMost Voted
- BMalicious IP
- CCompliance standard
- DFinancial informationMost Voted
- EMalwareMost Voted
Correct Answer:
CDE
CDE
send
light_mode
delete
Question #5
A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed.
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
- Aset the Container model to manual relearn and set the default runtime rule to block for process protection.
- Bset the Container model to relearn and set the default runtime rule to prevent for process protection.
- Cadd a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list, and set the action to ג€preventג€.
- Dchoose ג€copy into ruleג€ for the Container, add a ransomWare process into the denied process list, and set the action to ג€blockג€.Most Voted
Correct Answer:
C
C
send
light_mode
delete
All Pages