2022 Realistic PCCSE Dumps are Available for Instant Access
Download Exam PCCSE Practice Test Questions with 100% Verified Answers
NEW QUESTION 44
During an initial deployment of Prisma Cloud Compute, the customer sees vulnerabilities in their environment.
Which statement correctly describes the default vulnerability policy?
- A. It alerts on any container with more than three critical vulnerabilities.
- B. It alerts on all vulnerabilities, regardless of severity.
- C. It blocks all containers that contain a vulnerability.
- D. It blocks containers after 30 days if they contain a critical vulnerability.
Answer: B
NEW QUESTION 45
Which three types of bucket exposure are available in the Data Security module? (Choose three.)
- A. Differential
- B. International
- C. Private
- D. Conditional
- E. Public
Answer: A,B,D
NEW QUESTION 46
A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)
- A. individual grace periods for each severity level
- B. apply policy only when vendor fix is available
- C. individual actions based on package type
- D. customize message on blocked requests
- E. output verbosity for blocked requests
Answer: A,B,E
NEW QUESTION 47
An administrator has been tasked with a requirement by your DevSecOps team to write a script to continuously query programmatically the existing users, and the user's associated permission levels, in a Prisma Cloud Enterprise tenant.
Which public documentation location should be reviewed to help determine the required attributes to carry out this step?
- A. Prisma Cloud Administrator's Guide (Compute)
- B. Prisma Cloud API Reference
- C. Prisma Cloud Compute API Reference
- D. Prisma Cloud Enterprise Administrator's Guide
Answer: D
NEW QUESTION 48
An administrator sees that a runtime audit has been generated for a Container The audit message is DNS resolution of suspicious name wikipedia.com. type A".
Why would this message appear as an audit?
- A. This is a DNS known to be a source of malware
- B. The Layer7 firewall detected this as anomalous behavior
- C. The DNS was not learned as part of the Container model or added to the DNS allow list
- D. The process calling out to this domain was not part of the Container model.
Answer: A
NEW QUESTION 49
A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)
- A. apply policy only when vendor fix is available
- B. individual actions based on package type
- C. individual grace periods for each severity level
- D. customize message on blocked requests
- E. output verbosity for blocked requests
Answer: B,C,E
NEW QUESTION 50
What are two ways to scan container images in Jenkins pipelines? (Choose two.)
- A. twistcli
- B. Jenkins Docker plugin
- C. Prisma Cloud Visual Studio Code plugin with Jenkins integration
- D. Compute Azure DevOps plugin
- E. Compute Jenkins plugin
Answer: B,C
NEW QUESTION 51
The development team wants to block Cross Site Scripting attacks from pods in its environment. How should the team construct the CNAF policy to protect against this attack?
- A. create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to alert.
- B. create a Container CNAF policy, targeted at a specific resource, check the box for XSS protection, and set the action to prevent.
- C. create a Container CNAF policy, targeted at a specific resource, and they should set "Explicitly allowed inbound IP sources" to the IP address of the pod.
- D. create a Host CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to "prevent".
Answer: D
NEW QUESTION 52
The compliance team needs to associate Prisma Cloud policies with compliance frameworks. Which option should the team select to perform this task?
- A. Alert Rules
- B. Compliance
- C. Custom Compliance
- D. Policies
Answer: B
NEW QUESTION 53
Which two statements are true about the differences between build and run config policies? (Choose two.)
- A. Build policies enable you to check for security misconfigurations in the IaC templates and ensure that these issues do not get into production.
- B. Build and Audit Events policies belong to the configuration policy set.
- C. Run policies monitor network activities in your environment, and check for potential issues during runtime.
- D. Run and Network policies belong to the configuration policy set.
- E. Run policies monitor resources, and check for potential issues after these cloud resources are deployed.
Answer: B,C
NEW QUESTION 54
Given the following RQL:
event from cloud.audit_logs where operation IN ('CreateCryptoKey', 'DestroyCryptoKeyVersion',
'v1.compute.disks.createSnapshot')
Which audit event snippet is identified?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: A
NEW QUESTION 55
Given the following RQL:
Which audit event snippet is identified by the RQL?
A)
B)
C)
D)
- A. Option B
- B. Option C
- C. Option A
- D. Option D
Answer: D
NEW QUESTION 56
Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster.
Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?
- A. From the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.
- B. From the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.
- C. From the deployment page configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.
- D. From the deployment page in Console, choose twistlock-console for Console identifier, and run the curl
| bash script on the master Kubernetes node.
Answer: A
NEW QUESTION 57
Move the steps to the correct order to set up and execute a serverless scan using AWS DevOps.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
NEW QUESTION 58
Which option shows the steps to install the Console in a Kubernetes Cluster?
- A. Download the Console and Defender image Generate YAML for Defender
Deploy Defender YAML using kubectl - B. Download the Console and Defender image Download YAML for Defender from the document site Deploy Defender YAML using kubectl
- C. Download and extract release tarball Generate YAML for Console
Deploy Console YAML using kubectl - D. Download and extract release tarball Download the YAML for Console Deploy Console YAML using kubectl
Answer: C
NEW QUESTION 59
A customer has Prisma Cloud Enterprise and host Defenders deployed
What are two options that allow an administrator to upgrade Defenders'? (Choose two )
- A. generate a new DaemonSet file
- B. with auto-upgrade, the host Defender will auto-upgrade.
- C. click the update button in the web-interface
- D. auto deploy the Lambda Defender
Answer: A,B
NEW QUESTION 60
When would a policy apply if the policy is set under Defend > Vulnerability > Images > Deployed?
- A. when the Image is built
- B. when a Container is started form an Image
- C. when a serverless repository is scanned
- D. when the Image is built and when a Container is started form an Image
Answer: D
NEW QUESTION 61
A customer wants to be notified about port scanning network activities in their environment Which policy type detects this behavior?
- A. Anomaly
- B. Port Scan
- C. Config
- D. Network
Answer: A
NEW QUESTION 62
Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default Where should the customer navigate in Console?
- A. Defend > Compliance
- B. Monitor > Compliance
- C. Custom > Compliance
- D. Manage > Compliance
Answer: B
NEW QUESTION 63
An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise tenant.
In which order will the APIs be executed for this service?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Answer:
Explanation:
NEW QUESTION 64
A customer is deploying Defenders to a Fargate environment. It wants to understand the vulnerabilities in the image it is deploying.
How should the customer automate vulnerability scanning for images deployed to Fargate?
- A. Designate a Fargate Defender to serve a dedicated image scanner
- B. Embed a Fargate Defender to automatically scan for vulnerabilities
- C. Set up a vulnerability scanner on the registry
- D. Use Cloud Compliance to identify misconfigured AWS accounts
Answer: C
NEW QUESTION 65
A customer does not want alerts to be generated from network traffic that originates from trusted internal networks.
Which setting should you use to meet this customer's request?
- A. Trusted Alert IP Addresses
- B. Anomaly Trusted List
- C. Trusted Login IP Addresses
- D. Enterprise Alert Disposition
Answer: A
NEW QUESTION 66
A customer has a requirement to scan serverless functions for vulnerabilities.
Which three settings are required to configure serverless scanning? (Choose three.)
- A. Region
- B. Defender Name
- C. Provider
- D. Credential
- E. Console Address
Answer: A,C,D
NEW QUESTION 67
An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console on the default service endpoint and will be exporting to YAML.
Console Address: $CONSOLE_ADDRESS Websocket Address: $WEBSOCKET_ADDRESS User: $ADMIN_USER Which command generates the YAML file for Defender install?
- A. <PLATFORM>/twistcli defender export kubernetes \
--address $CONSOLE_ADDRESS \
--user $ADMIN_USER \
--cluster-address $WEBSOCKET_ADDRESS - B. <PLATFORM>/twistcli defender export kubernetes \
--address $WEBSOCKET_ADDRESS \
--user $ADMIN_USER \
--cluster-address $CONSOLE_ADDRESS - C. <PLATFORM>/twistcli defender \
--address $CONSOLE_ADDRESS \
--user $ADMIN_USER \
--cluster-address $CONSOLE_ADDRESS - D. <PLATFORM>/twistcli defender YAML kubernetes \
--address $CONSOLE_ADDRESS \
--user $ADMIN_USER \
--cluster-address $WEBSOCKET_ADDRESS
Answer: A
NEW QUESTION 68
......
Positive Aspects of Valid Dumps PCCSE Exam Dumps! : https://lead2pass.examdumpsvce.com/PCCSE-valid-exam-dumps.html
