Palo Alto Networks PCCSE Exam Practice Questions (P. 5)

The security team wants to protect a web application container from an SQLi attack.
Which type of policy should the administrator create to protect the container?

An S3 bucket within AWS has generated an alert by violating the Prisma Cloud Default policy `AWS S3 buckets are accessible to public`. The policy definition follows: config where cloud.type = 'aws' AND api.name='aws-s3api-get-bucket-acl' AND json.rule="((((acl.grants[?(@.grantee=='AllUsers')] size > 0) or policyStatus.isPublic is true) and publicAccessBlockConfiguration does not exist) or ((acl.grants[?(@.grantee=='AllUsers')] size > 0) and publicAccessBlockConfiguration.ignorePublicAcis is false) or (policyStatus.isPublic is true and publicAccessBlockConfiguration.restrictPublicBuckets is false)) and websiteConfiguration does not exist"
Why did this alert get generated?

DRAG DROP -
Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Select and Place:

A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment.
Which action needs to be set for `do not use privileged containers`?

Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?