MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: The Prisma Cloud administrator has configured a new policy.Which steps should be used to assign this policy to a compliance standard?
Question2: An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise tenant.In which order will the APIs be executed for this service?(Drag the steps into the correct order of occurrence, from the first step to the last.)
Question3: An organization wants to be notified immediately to any "High Severity" alerts for the account group "Clinical Trials" via Slack.Which option shows the steps the organization can use to achieve this goal?
Question4: Which component(s), if any, will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?
Question5: A customer has a requirement to automatically protect all Lambda functions with runtime protection. What is the process to automatically protect all the Lambda functions?
Question6: A customer does not want alerts to be generated from network traffic that originates from trusted internal networks.Which setting should you use to meet this customer's request?
Question7: Which three types of classifications are available in the Data Security module? (Choose three.)
Question8: An administrator sees that a runtime audit has been generated for a Container. The audit message is "DNS resolution of suspicious name wikipedia.com. type A".Why would this message appear as an audit?
Question9: A customer has a requirement to scan serverless functions for vulnerabilities.Which three settings are required to configure serverless scanning? (Choose three.)
Question10: Which "kind" of Kubernetes object is configured to ensure that Defender is acting as the admission controller?
Question11: Match the service on the right that evaluates each exposure type on the left.(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
Question12: Which statement about build and run policies is true?
Question13: A customer has a development environment with 50 connected Defenders. A maintenance window is set for Monday to upgrade 30 stand-alone Defenders in the development environment, but there is no maintenance window available until Sunday to upgrade the remaining 20 stand-alone Defenders.Which recommended action manages this situation?
Question14: A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment.Which action needs to be set for "do not use privileged containers"?
Question15: A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time.What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)
Question16: Which three options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)
Question17: The development team wants to block Cross Site Scripting attacks from pods in its environment. How should the team construct the CNAF policy to protect against this attack?
Question18: A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which three options could have generated this audit? (Choose three.)
Question19: A business unit has acquired a company that has a very large AWS account footprint. The plan is to immediately start onboarding the new company's AWS accounts into Prisma Cloud Enterprise tenant immediately. The current company is currently not using AWS Organizations and will require each account to be onboarded individually.The business unit has decided to cover the scope of this action and determined that a script should be written to onboard each of these accounts with general settings to gain immediate posture visibility across the accounts.Which API endpoint will specifically add these accounts into the Prisma Cloud Enterprise tenant?
Question20: You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account.Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully.Why are no alerts being generated?
Question21: How are the following categorized?Backdoor account access Hijacked processes Lateral movementPort scanning
Question22: Which three types of buckets exposure are available in the Data Security module? (Choose three.)
Question23: Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?
Question24: An S3 bucket within AWS has generated an alert by violating the Prisma Cloud Default policy "AWS S3 buckets are accessible to public". The policy definition follows:config where cloud.type = 'aws' AND api.name='aws-s3api-get-bucket-acl' AND json.rule="((((acl.grants[? (@.grantee=='AllUsers')] size > 0) or policyStatus.isPublic is true) and publicAccessBlockConfiguration does not exist) or ((acl.grants[?(@.grantee=='AllUsers')] size > 0) and publicAccessBlockConfiguration.ignorePublicAcis is false) or (policyStatus.isPublic is true and publicAccessBlockConfiguration.restrictPublicBuckets is false)) and websiteConfiguration does not exist" Why did this alert get generated?
Question25: Which container scan is constructed correctly?
Question26: A customer wants to be notified about port scanning network activities in their environment. Which policy type detects this behavior?
Question27: An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same ports as the default Prisma Compute Console configuration.In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS. Which port will twistcli need to use to access the Prisma Compute APIs?
Question28: Which step is included when configuring Kubernetes to use Prisma Cloud Compute as an admission controller?
Question29: Which statement is true regarding CloudFormation templates?
Question30: A Prisma Cloud administrator is tasked with pulling a report via API. The Prisma Cloud tenant is located on app2.prismacloud.io.What is the correct API endpoint?
