売れ筋トップクラスのPCCSE最新試験問題2022年最新のPalo Alto Networks試験練習
Cloud Security Engineer問題集でPCCSE試験は完全版問題で試験学習ガイド
質問 48
Order the steps involved in onboarding an AWS Account for use with Data Security feature.
正解:
解説:
質問 49
A business unit has acquired a company that has a very large AWS account footprint The plan is to immediately start onboarding the new company's AWS accounts into Prisma Cloud Enterprise tenant immediately The current company is currently not using AWS Organizations and will require each account to be onboarded individually The business unit has decided to cover the scope of this action and determined that a script should be written to onboard each of these accounts with general settings to gam immediate posture visibility across the accounts.
Which API endpoint will specifically add these accounts into the Prisma Cloud Enterprise tenant?
- A. https/Zapiprismacloud lo/accountgroup/aws
- B. https ://api prismacloud 10/account/aws
- C. https //api pnsmacloud io/cloud/
- D. https://api.pnsmacloud io/cloud/aws
正解: D
質問 50
A customer has a requirement to restrict any container from resolving the name www.evil-url.com.
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
- A. Set www.evil-url.com as a blocklisted DNS name in the default Container runtime policy, and set the effect to block.
- B. Choose "copy into rule" for any Container, set www.evil-url.com as a blocklisted DNS name in the Container policy and set the policy effect to alert.
- C. Choose "copy into rule" for any Container, set www.evil-url.com as a blocklisted DNS name, and set the effect to prevent.
- D. Set www.evil-url.com as a blocklisted DNS name in the default Container policy and set the effect to prevent.
正解: B
質問 51
A customer has a requirement to scan serverless functions for vulnerabilities.
Which three settings are required to configure serverless scanning? (Choose three.)
- A. Credential
- B. Console Address
- C. Defender Name
- D. Provider
- E. Region
正解: A,D,E
質問 52
A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which three options could have generated this audit? (Choose three.)
- A. High CPU usage over time for the container is detected.
- B. The value of the mined currency exceeds $100.
- C. The mined currency is associated with a user token.
- D. Common cryptominer port usage was found.
- E. Common cryptominer process name was found.
正解: A,C,E
質問 53
Per security requirements, an administrator needs to provide a list of people who are receiving e-mails for Prisma Cloud alerts Where can the administrator locate this list of e-mail recipients'?
- A. Target section within an Alert Rule
- B. Users section within Settings.
- C. Notification Template section within Alerts.
- D. Set Alert Notification section within an Alert Rule.
正解: B
質問 54
Which "kind" of Kubernetes object is configured to ensure that Defender is acting as the admission controller?
- A. PodSecurityPolicies
- B. DestinationRules
- C. MutatingWebhookConfiguration
- D. ValidatingWebhookConfiguration
正解: D
質問 55
An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise tenant.
In which order will the APIs be executed for this service?
(Drag the steps into the correct order of occurrence, from the first step to the last.)
正解:
解説:
質問 56
Move the steps to the correct order to set up and execute a serverless scan using AWS DevOps.
正解:
解説:
Explanation
Graphical user interface, text, application Description automatically generated
質問 57
A security team has been asked to create a custom policy.
Which two methods can the team use to accomplish this goal? (Choose two )
- A. add a new policy
- B. edit the query in the out-of-the-box policy
- C. disable an out-of-the-box policy
- D. clone an existing policy
正解: C,D
質問 58
Which component(s), if any will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?
- A. Defenders
- B. twistcli
- C. Jenkins
- D. Console
正解: B
質問 59
Given the following RQL:
event from cloud.audit_logs where operation IN ('CreateCryptoKey', 'DestroyCryptoKeyVersion',
'v1.compute.disks.createSnapshot')
Which audit event snippet is identified?
A)
B)
C)
D)
- A. Option D
- B. Option A
- C. Option B
- D. Option C
正解: B
質問 60
An administrator sees that a runtime audit has been generated for a host. The audit message is:
"Service postfix attempted to obtain capability SHELL by executing /bin/sh /usr/libexec/postfix/postfix- script.stop. Low severity audit, event is automatically added to the runtime model" Which runtime host policy rule is the root cause for this runtime audit?
- A. Custom rule with specific configuration for file integrity
- B. Default rule that alerts on capabilities
- C. Custom rule with specific configuration for networking
- D. Default rule that alerts on suspicious runtime behavior
正解: D
質問 61
An administrator needs to detect and alert on any activities performed by a root account.
Which policy type should be used?
- A. audit event
- B. config-build
- C. config-run
- D. network
正解: D
質問 62
Which container scan is constructed correctly?
- A. twistcli images scan --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/ latest
- B. twistcli images scan -u api -p api --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
- C. twistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 --details myimage/latest
- D. twistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 -- container myimage/latest
正解: A
質問 63
Which method should be used to authenticate to Prisma Cloud Enterprise programmatically?
- A. single sign-on
- B. basic authentication
- C. SAML
- D. access key
正解: D
解説:
Explanation
Prisma Cloud requires an API access key to enable programmatic access to the REST API. By default, only the System Admin has API access and can enable API access for other administrators. To generate an access key, see Create and Manage Access Keys. After you obtain an access key, you can submit it in a REST API request to generate a JSON Web Token (JWT). The JWT is then used to authenticate all subsequent REST API requests on Prisma Cloud.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/get-started-with-prisma-cloud/acce
質問 64
Given the following RQL:
Which audit event snippet is identified by the RQL?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option D
- D. Option C
正解: C
質問 65
A customer has configured the JIT, and the user created by the process is trying to log in to the Prisma Cloud console. The user encounters the following error message:
What is the reason for the error message?
- A. The attribute name is not set correctly in JIT settings.
- B. The role is not assigned for the user.
- C. The user does not exist.
- D. The user entered an incorrect password
正解: A
質問 66
Which type of compliance check is available for rules under Defend > Compliance > Containers and Images
> CI?
- A. Functions
- B. Image
- C. Host
- D. Container
正解: C
質問 67
Which container scan is constructed correctly?
- A. twistcli images scan --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/ latest
- B. twistcli images scan -u api -p api --docker-address https://us-west1.cloud.twistlock.com/us-3-123456789 myimage/latest
- C. twistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789
--details myimage/latest - D. twistcli images scan -u api -p api --address https://us-west1.cloud.twistlock.com/us-3-123456789 -- container myimage/latest
正解: A
質問 68
What are two ways to scan container images in Jenkins pipelines? (Choose two )
- A. twistcli
- B. Prisma Cloud Visual Studio Code plugin with Jenkins integration
- C. Compute Jenkins plugin
- D. Compute Azure DevOps plugin
- E. Jenkins Docker plugin
正解: A,B
質問 69
Which of the following are correct statements regarding the use of access keys? (Choose two.)
- A. System Admin can create access key for all users
- B. Access keys must have an expiration date
- C. Access keys are used for API calls
- D. Up to two access keys can be active at any time
正解: A,D
質問 70
A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
- A. add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list and set the action to "prevent".
- B. set the Container model to manual relearn and set the default runtime rule to block for process protection.
- C. choose "copy into rule" for the Container add a ransomWare process into the denied process list and set the action to "block"
- D. set the Container model to relearn and set the default runtime rule to prevent for process protection.
正解: A
質問 71
A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can be performed by the Terraform script? (Choose two.)
- A. create the Prisma Cloud role
- B. enable the required APIs for Prisma Cloud
- C. publish the flow log to a storage bucket
- D. enable flow logs for Prisma Cloud.
正解: A,C
質問 72
Which method should be used to authenticate to Prisma Cloud Enterprise programmatically?
- A. single sign-on
- B. basic authentication
- C. SAML
- D. access key
正解: D
質問 73
......
最善な方法で問題集を使おう！練習テストならこれPalo Alto Networks PCCSE：https://jp.fast2test.com/PCCSE-premium-file.html
PCCSE問題集を無料提供しております！試験問題と解答：https://drive.google.com/open?id=1JPPHy5e7qcMlK1BNihCiyygd728JvTiF