PCCSE Practice Online

Question 1

Creation of a new custom compliance standard that is based on other individual custom compliance standards needs to be automated.

Assuming the necessary data from other standards has been collected, which API order should be used for this new compliance standard?

A :

1) https://api.prismacloud.io/compliance/add

2) https://api.prismacloud.io/compliance/requirementld/section

3) https://api.prismacloud.io/compliance/complianceld/requirement

B :

1) https://api.prismacloud.io/compliance

2) https://api.prismacloud.io/compliance/complianceld/requirement

3) https://api.prismacloud.io/compliance/requirementld/section

C :

1) https://api.prismacloud.io/compliance/add

2) https://api.prismacloud.io/compliance/complianceld/requirement

3) https://api.prismacloud.io/compliance/requirementld/section

D :

1) https://api.prismacloud.io/compliance

2) https://api.prismacloud.io/compliance/requirementld/section

3) https://api.prismacloud.io/compliance/complianceld/requirement

Answer: C

Question 2

The security team wants to protect a web application container from an SQLi attack. Which type of policy should the administrator create to protect the container?

A : CNAF

B : Runtime

C : Compliance

D : CNNF

Answer: A

Question 3

Which two actions are required in order to use the automated method within Amazon Web Services (AWS) Cloud to streamline the process of using remediation in the identity and access management (IAM) module? (Choose two.)

A : Install boto3 & requests library.

B : Configure IAM Azure remediation script.

C : Integrate with Azure Service Bus.

D : Configure IAM AWS remediation script.

Answer: A,D

Question 4

A customer has a requirement to restrict any container from resolving the name www.evil-url.com.

How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

A : Choose ''copy into rule'' for any Container, set www.evil-url.com as a blocklisted DNS name in the Container policy and set the policy effect to alert.

B : Set www.evil-url.com as a blocklisted DNS name in the default Container runtime policy, and set the effect to block.

C : Choose ''copy into rule'' for any Container, set www.evil-url.com as a blocklisted DNS name, and set the effect to prevent.

D : Set www.evil-url.com as a blocklisted DNS name in the default Container policy and set the effect to prevent.

Answer: A

Question 5

A customer has serverless functions that are deployed in multiple clouds.

Which serverless cloud provider is covered be ''overly permissive service access'' compliance check?

A : Alibaba

B : GCP

C : AWS

D : Azure

Answer: C

Name:	Prisma Certified Cloud Security Engineer
Exam Code:	PCCSE
Certification:	Paloalto Networks
Vendor:	Palo Alto Networks
Total Questions:	250
Last Updated:	Apr 23, 2024

Download Demo PCCSE Dumps

Create Account

Password Recovery

Download Demo PCCSE Dumps

Member Login

Create Account

Password Recovery

PCCSE Practice Online