PCCSE問題集、Palo Alto Networks実際の試験問題

質問 1

Which option shows the steps to install the Console in a Kubernetes Cluster?

A. Download and extract release tarball Generate YAML for Console
Deploy Console YAML using kubectl

B. Download the Console and Defender image Download YAML for Defender from the document site Deploy Defender YAML using kubectl

C. Download the Console and Defender image Generate YAML for Defender
Deploy Defender YAML using kubectl

D. Download and extract release tarball Download the YAML for Console Deploy Console YAML using kubectl

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which action must be taken to enable a user to interact programmatically with the Prisma Cloud APIs and for a nonhuman entity to be enabled for the access keys?

A. Create a role with System Admin and generate access keys.

B. Create a role with Account Group Read Only and assign it to the user.

C. Create a user with a role that has minimal access.

D. Create a role and assign it to the Service Account.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which two attributes of policies can be fetched using API? (Choose two.)

A. policy signature

B. policy violation

C. policy label

D. policy mode

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 4

An organization wants to be notified immediately to any "High Severity" alerts for the account group "Clinical Trials" via Slack.
Which option shows the steps the organization can use to achieve this goal?

A. 1. Create an alert rule and select "Clinical Trials" as the account group
2.Under the "Select Policies" tab, filter on severity and select "High"
3.Under the Set Alert Notification tab, choose Slack and populate the channel
4.Set Frequency to "As it Happens"
5.Set up the Slack Integration to complete the configuration

B. 1. Configure Slack Integration
2.Create an alert rule and select "Clinical Trials" as the account group
3.Under the "Select Policies" tab, filter on severity and select "High"
4.Under the Set Alert Notification tab, choose Slack and populate the channel
5.Set Frequency to "As it Happens"

C. 1. Configure Slack Integration
2.Create an alert rule
3.Under the "Select Policies" tab, filter on severity and select "High"
4.Under the Set Alert Notification tab, choose Slack and populate the channel
5.Set Frequency to "As it Happens"

D. 1. Under the "Select Policies" tab, filter on severity and select "High"
2.Under the Set Alert Notification tab, choose Slack and populate the channel
3.Set Frequency to "As it Happens"
4.Configure Slack Integration
5.Create an Alert rule

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

An administrator sees that a runtime audit has been generated for a Container. The audit message is "DNS resolution of suspicious name wikipedia.com. type A".
Why would this message appear as an audit?

A. This is a DNS known to be a source of malware.

B. The Layer7 firewall detected this as anomalous behavior.

C. The process calling out to this domain was not part of the Container model.

D. The DNS was not learned as part of the Container model or added to the DNS allow list.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which three Orchestrator types are supported when deploying Defender? (Choose three.)

A. Amazon ECS

B. Docker Swarm

C. Azure ACS

D. Red Hat OpenShift

E. Kubernetes

正解: A,D,E

解説: (PassTest メンバーにのみ表示されます)

質問 7

A customer wants to monitor the company's AWS accounts via Prisma Cloud, but only needs the resource configuration to be monitored for now.
Which two pieces of information do you need to onboard this account? (Choose two.)

A. Role ARN

B. Cloudtrail

C. External ID

D. Active Directory ID

E. Subscription ID

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 8

Where are Top Critical CVEs for deployed images found?

A. Defend Vulnerabilities Images

B. Monitor Vulnerabilities Vulnerabilities Explorer

C. Defend Vulnerabilities Code Repositories

D. Monitor Vulnerabilities Images

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 9

A customer's Security Operations Center (SOC) team wants to receive alerts from Prisma Cloud via email once a day about all policies that have a violation, rather than receiving an alert every time a new violation occurs.
Which alert rule configuration meets this requirement?

A. Configure an alert rule. Under the "Policies" tab, select "High Risk Severity Policies." In the "Set Alert Notifications" tab, select "Email > Recurring," set to repeat every 1 day, and enable "Email."

B. Set up email integrations under the "Integrations" tab in "Settings" and create a notification template.

C. Configure an alert rule. Under the "Policies" tab, select "All Policies." In the "Set Alert Notifications" tab, select "Email > Recurring," set to repeat every 1 day, and then enable "Email."

D. Configure an alert rule with all the defaults except selecting email within the "Alert Notifications" tab and specifying recipient.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 10

Match the service on the right that evaluates each exposure type on the left.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

正解:

質問 11

An administrator for Prisma Cloud needs to obtain a graphical view to monitor all connections, including connections across hosts and connections to any configured network objects.
Which setting does the administrator enable or configure to accomplish this task?

A. Telemetry

B. Host Insight

C. WAAS Analytics

D. Cloud Native Network Firewall

E. ADEM

正解: D

質問 12

Which two integrated development environment (IDE) plugins are supported by Prisma Cloud as part of its Code Security? (Choose two.)

A. Visual Studio Code

B. BitBucket

C. IntelliJ

D. CircleCI

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 13

How are the following categorized?
Backdoor account access Hijacked processes Lateral movement
Port scanning

A. incidents

B. audits

C. admission controllers

D. models

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 14

Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster.
Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?

A. From the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.

B. From the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.

C. From the deployment page configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.

D. From the deployment page in Console, choose twistlock-console for Console identifier, and run the curl
| bash script on the master Kubernetes node.

正解: B

質問 15

A DevOps lead reviewed some system logs and notices some odd behavior that could be a data exfiltration attempt. The DevOps lead only has access to vulnerability data in Prisma Cloud Compute, so the DevOps lead passes this information to SecOps.
Which pages in Prisma Cloud Compute can the SecOps lead use to investigate the runtime aspects of this attack?

A. The SecOps lead should review the vulnerability scans in the CI/CD process to determine blame.

B. The SecOps lead should use the Incident Explorer page and Monitor > Events > Container Audits.

C. The SecOps lead should use Incident Explorer and Compliance Explorer.

D. The SecOps lead should investigate the attack using Vulnerability Explorer and Runtime Radar.

正解: B

解説: (PassTest メンバーにのみ表示されます)

Palo Alto Networks Prisma Certified Cloud Security Engineer - PCCSE 模擬練習