[Sep 04, 2021] Latest PCCSE Exam with Accurate Prisma Certified Cloud Security Engineer PDF Questions
Practice To PCCSE - Test4Engine Remarkable Practice On your Prisma Certified Cloud Security Engineer Exam
NEW QUESTION 12
Which option shows the steps to install the Console in a Kubernetes Cluster?
- A. Download the Console and Defender image Generate YAML for Defender Deploy Defender YAML using kubectl
- B. Download the Console and Defender image Download YAML for Defender from the document site Deploy Defender YAML using kubectl
- C. Download and extract release tarball Generate YAML for Console Deploy Console YAML using kubectl
- D. Download and extract release tarball Download the YAML for Console Deploy Console YAML using kubectl
Answer: D
NEW QUESTION 13
An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise.
tenant-In which order will the APIs be executed for this service? (Drag the steps into the correct order of occurrence from the first step to the last)
Answer:
Explanation:
NEW QUESTION 14
What are two ways to scan container images in Jenkins pipelines? (Choose two.)
- A. twistcli
- B. Compute Jenkins plugin
- C. Compute Azure DevOps plugin
- D. Prisma Cloud Visual Studio Code plugin with Jenkins integration
- E. Jenkins Docker plugin
Answer: D,E
NEW QUESTION 15
A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can be performed by the Terraform script? (Choose two.)
- A. enable flow logs for Prisma Cloud.
- B. enable the required APIs for Prisma Cloud
- C. create the Prisma Cloud role
- D. publish the flow log to a storage bucket
Answer: C,D
NEW QUESTION 16
Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Answer:
Explanation:
NEW QUESTION 17
An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same ports as the default Prisma Compute Console configuration In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS Which port will twistcli need to use to access the Prisma Compute APIs?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/20-12/prisma-cloud-compute-edition-admin/howto/con
NEW QUESTION 18
A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)
- A. individual grace periods for each severity level
- B. output verbosity for blocked requests
- C. customize message on blocked requests
- D. individual actions based on package type
- E. apply policy only when vendor fix is available
Answer: A,B,D
NEW QUESTION 19
You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is necessary to complete this policy?
- A. YAML
- B. JSON
- C. Terraform
- D. CloudFormation
Answer: B
NEW QUESTION 20
The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely.
Which strategy should the administrator use to achieve this goal?
- A. Set Alert Disposition to Aggressive
- B. Disable the policy
- C. Set the Alert Disposition to Conservative
- D. Change the Training Threshold to Low
Answer: D
Explanation:
Section: (none)
Explanation
NEW QUESTION 21
Which three options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)
- A. Failure threshold
- B. Apply rule only when vendor fixes are available
- C. Credential
- D. Grace Period
- E. Scope - Scans run on a particular host
Answer: A,C,D
NEW QUESTION 22
Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?
- A. Download and extract the release tarball
Create an EFS file system and mount to each node in the cluster Create the Console task definition Deploy the task definition - B. The console cannot natively run in an ECS cluster. A onebox deployment should be used.
- C. Download and extract release tarball Download task from AWS
Create the Console task definition Deploy the task definition - D. Download and extract the release tarball
Ensure that each node has its own storage for Console data Create the Console task definition Deploy the task definition
Answer: A
NEW QUESTION 23
Per security requirements, an administrator needs to provide a list of people who are receiving e-mails for Prisma Cloud alerts.
Where can the administrator locate this list of e-mail recipients?
- A. Target section within an Alert Rule.
- B. Notification Template section within Alerts.
- C. Users section within Settings.
- D. Set Alert Notification section within an Alert Rule.
Answer: A
NEW QUESTION 24
You wish to create a custom policy with build and run subtypes.
Match the query types for each example.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
Answer:
Explanation:
NEW QUESTION 25
You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account.
Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully.
Why are no alerts being generated?
- A. The public cloud account is not associated with an alert rule.
- B. The public cloud account does not have audit trail ingestion enabled.
- C. The public cloud account is not associated with an alert notification.
- D. The public cloud account does not access to configuration resources.
Answer: C
NEW QUESTION 26
Which component(s), if any will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?
- A. Jenkins
- B. twistcli
- C. Console
- D. Defenders
Answer: B
NEW QUESTION 27
......
Exam Questions and Answers for PCCSE Study Guide Questions and Answers!: https://www.test4engine.com/PCCSE_exam-latest-braindumps.html
Practice To PCCSE - Test4Engine Remarkable Practice On your Prisma Certified Cloud Security Engineer Exam: https://drive.google.com/open?id=1aKEiEfB6jssn_a4FNZklwgKCkvuEgNm_