Palo Alto Networks Prisma Certified Cloud Security Engineer - PCCSE Exam Practice Test
An administrator wants to retrieve the compliance policies for images scanned in a continuous integration (CI) pipeline.
Which endpoint will successfully execute to enable access to the images via API?
Which endpoint will successfully execute to enable access to the images via API?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
In Prisma Cloud for Azure Net Effective Permissions Calculation, the following Azure permission levels are supported by which three permissions? (Choose three).
Correct Answer: B,C,E
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Where are Top Critical CVEs for deployed images found?
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which three actions are available for the container image scanning compliance rule? (Choose three.)
Correct Answer: A,B,C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which three OWASP protections are part of Prisma Cloud Web-Application and API Security (WAAS) rule?
(Choose three.)
(Choose three.)
Correct Answer: B,C,E
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster.
Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?
Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?
Correct Answer: C
Vote an answer
Match the service on the right that evaluates each exposure type on the left.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
Correct Answer:
A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application.
The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.
Which port should the team specify in the CNAF rule to protect the application?
The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.
Which port should the team specify in the CNAF rule to protect the application?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
What is the order of steps to create a custom network policy?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Correct Answer:
Explanation:
A picture containing table Description automatically generated
A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment.
Which action needs to be set for "do not use privileged containers"?
Which action needs to be set for "do not use privileged containers"?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which component(s), if any, will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
On which cloud service providers can new API release information for Prisma Cloud be received?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
What must be created in order to receive notifications about alerts generated when the operator is away from the Prisma Cloud Console?
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which two of the following are required to be entered on the IdP side when setting up SSO in Prisma Cloud?
(Choose two.)
(Choose two.)
Correct Answer: B,C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
(Drag the steps into the correct order of occurrence, from the first step to the last.)
Correct Answer:
Explanation:
1. click on compliance standard.
2. add custom compliance standard.
3. edit policies.
4. add compliance standard from drop-down menu
https://docs.prismacloudcompute.com/docs/enterprise_edition/compliance/custom_compliance_checks.html#cre The process of mapping a policy to a custom compliance standard in a security platform like Prisma Cloud by Palo Alto Networks involves several specific steps. Firstly, one must access the compliance standards, which is typically done by clicking on the "Compliance Standards" section within the platform's interface. This is where all standards, including custom and predefined ones, are listed.
Next, if the custom compliance standard does not already exist, it must be created. This step involves defining the criteria and controls that make up the standard, tailored to the organization's specific requirements.
Once the custom compliance standard is in place, the policy in question needs to be edited. This editing process would involve configuring the policy to align with the compliance controls outlined in the custom standard, ensuring that the policy will enforce or check for the necessary requirements as defined by the standard.
Finally, the last step is to formally associate or map the edited policy with the custom compliance standard.
This is typically done by adding the policy to the standard, which may involve selecting the custom compliance standard from a drop-down menu within the policy settings, confirming that this particular policy should be enforced as part of the compliance checks for that standard.
This ordered process ensures that policies are properly aligned with the organization's compliance goals and can be enforced and reported on accurately within the security platform.