PCCSE無料問題集「Palo Alto Networks Prisma Certified Cloud Security Engineer」

質問 1

Which two bot categories belong to unknown bots under Web-Application and API Security (WAAS) bot protection? (Choose two.)

（A）HTTP libraries

（B）News bots

（C）Search engine crawlers

（D）Web scrapers

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which three platforms support the twistcli tool? (Choose three.)

（A）Linux

（B）Windows

（C）Solaris

（D）Android

（E）MacOS

正解：A、B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Prisma Cloud cannot integrate which of the following secrets managers?

（A）HashiCorp Vault

（B）AWS Secret Manager

（C）IBM Secret Manager

（D）AzureKey Vault

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A customer wants to turn on Auto Remediation.
Which policy type has the built-in CLI command for remediation?

（A）Config

（B）Network

（C）Audit Event

（D）Anomaly

正解：A 解答を投票する

質問 5

Which two required request headers interface with Prisma Cloud API? (Choose two.)

（A）Content-type:application/xml

（B）x-redlock-auth

（C）Content-type:application/json

（D）>x-redlock-request-id

正解：B、C 解答を投票する

質問 6

An administrator has access to a Prisma Cloud Enterprise.
What are the steps to deploy a single container Defender on an ec2 node?

（A）Pull the Defender image to the ec2 node, copy and execute the curl | bash script, and start the Defender to ensure it is running.

（B）Execute the curl | bash script on the ec2 node.

（C）Configure the cloud credential in the console and allow cloud discovery to auto-protect the ec2 node.

（D）Generate DaemonSet file and apply DaemonSet to the twistlock namespace.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Given the following information, which twistcli command should be run if an administrator were to exec into a running container and scan it from within using an access token for authentication?
* Console is located at https://prisma-console.mydomain.local
* Token is: TOKEN_VALUE
* Report ID is: REPORTJD
* Container image running is: myimage:latest

（A）twistcli images scan --console-address https://prisma-console.mydomain.local --auth-token TOKEN_VALUE -containerized -vulnerability-details REPORT_ID

（B）twistcli images scan -address https://prisma-console.mydomain.local -token TOKEN_VALUE
-containerized --details REPORT_ID

（C）twistcli images scan --address https://prisma-console.mydomain.local -token TOKENVALUE
-containerized -details myimage:latest

（D）twistcli images scan -console-address https://prisma-console.mydomain.local -auth-token MY_TOKEN -local-scan -details myimage:latest

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which three fields are mandatory when authenticating the Prisma Cloud plugin in the IntelliJ application?
(Choose three.)

（A）Access Key

（B）Prisma Cloud API URL

（C）Tags

（D）Secret Key

（E）Asset Name

正解：A、B、D 解答を投票する

質問 9

The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely.
Which strategy should the administrator use to achieve this goal?

（A）Set Alert Disposition to Aggressive

（B）Set the Alert Disposition to Conservative

（C）Change the Training Threshold to Low

（D）Disable the policy

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

On which cloud service providers can you receive new API release information for Prisma Cloud?

（A）AWS, Azure, GCP, Oracle, IBM

（B）AWS, Azure, GCP, IBM

（C）AWS, Azure, GCP, IBM, Alibaba

（D）AWS, Azure, GCP, Oracle, Alibaba

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

Given the following JSON query:
$.resource[*].aws_s3_bucket exists
Which tab is the correct place to add the JSON query when creating a Config policy?

（A）Build Your Rule (Build tab)

（B）Remediation

（C）Compliance Standards

（D）Details

（E）Build Your Rule (Run tab)

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Which statement accurately characterizes SSO Integration on Prisma Cloud?

（A）Prisma Cloud supports IdP initiated SSO, and its SAML endpoint supports the POST and GET methods.

（B）An administrator can configure different Identity Providers (IdP) for all the cloud accounts that Prisma Cloud monitors.

（C）An administrator who needs to access the Prisma Cloud API can use SSO after configuration.

（D）Okta, Azure Active Directory, PingID, and others are supported via SAML.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time.
What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)

（A）manual installation of the latest twistcli tool prior to the rolling upgrade

（B）all Defenders set in read-only mode before execution of the rolling upgrade

（C）additional workload licenses are required to perform the rolling upgrade

（D）an existing Console at version n-1

（E）a second location where you can install the Console

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Which type of RQL query should be run to determine if AWS Elastic Compute Cloud (EC2) instances without encryption was enabled?

（A）SECURITY

（B）EVENT

（C）NETWORK

（D）CONFIG

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

Which two statements explain differences between build and run config policies? (Choose two.)

（A）Run policies monitor resources and check for potential issues after these cloud resources are deployed.

（B）Run and Network policies belong to the configuration policy set.

（C）Build policies allow checking for security misconfigurations in the IaC templates and ensure these issues do not get into production.

（D）Run policies monitor network activities in the environment and check for potential issues during runtime.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 16

An administrator sees that a runtime audit has been generated for a Container. The audit message is "DNS resolution of suspicious name wikipedia.com. type A".
Why would this message appear as an audit?

（A）The process calling out to this domain was not part of the Container model.

（B）The Layer7 firewall detected this as anomalous behavior.

（C）The DNS was not learned as part of the Container model or added to the DNS allow list.

（D）This is a DNS known to be a source of malware.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

Web-Application and API Security (WAAS) provides protection for which two protocols? (Choose two.)

（A）TLS

（B）HTTP

（C）SSH

（D）Tomcat Web Connector via AJP

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

PCCSE 無料問題集「Palo Alto Networks Prisma Certified Cloud Security Engineer」

弊社を連絡する

関連リンク

トップ試験