Palo Alto Networks PCCSE 問題集

質問 1：
Which Prisma Cloud policy type detects port scanning activities in a customer environment?
A. Anomaly
B. Network
C. Config
D. Port Scan
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
What are the two ways to scope a CI policy for image scanning? (Choose two.)
A. hostname
B. image labels
C. image name
D. container name
正解：B,C

質問 3：
Review this admission control policy:
match[{"msg": msg}] { input.request.operation == "CREATE" input.request.kind.kind == "Pod" input.request.resource.resource == "pods" input.request.object.spec.containers[_].securityContext.privileged msg := "Privileged"
}
Which response to this policy will be achieved when the effect is set to "block"?
A. The policy will alert only the administrator when a privileged pod is created.
B. The policy will block all pods on a Privileged host.
C. The policy will replace Defender with a privileged Defender.
D. The policy will block the creation of a privileged pod.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Given the following RQL:
event from cloud.audit_logs where operation IN ('CreateCryptoKey', 'DestroyCryptoKeyVersion','v1.compute.disks.createSnapshot')
Which audit event snippet is identified?
A.

B.

C.

正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Put the steps involved to configure and scan using the IntelliJ plugin in the correct order.

正解：

Explanation:
* Install IntelliJ IDE
* Add Prisma Cloud plugin
* Configure the Prisma Cloud plugin
* Scan using the Prisma Cloud plugin
To configure and use the Prisma Cloud plugin for scanning within the IntelliJ Integrated Development Environment (IDE), you must follow a series of steps in a specific order to ensure proper setup and functionality.
Firstly, you need to have the IntelliJ IDE installed on your system. Without the IDE, you cannot add or use the Prisma Cloud plugin, as it is designed to work within this development environment.
Secondly, after installing the IntelliJ IDE, you add the Prisma Cloud plugin. This involves navigating to the plugin marketplace within IntelliJ and selecting the Prisma Cloud plugin for installation.
Once the plugin is added to your IntelliJ IDE, the next step is to configure the Prisma Cloud plugin. This configuration may include setting up your Prisma Cloud credentials, specifying your scan options, and other settings that tailor the plugin's functionality to your needs.
Finally, after the plugin is installed and configured, you can proceed to scan your project using the Prisma Cloud plugin. This will check your code against security policies and compliance standards, providing feedback and recommendations for any identified issues.
Following these steps ensures that the Prisma Cloud plugin is properly integrated into your IntelliJ development workflow, allowing for continuous security and compliance checks as part of the development process.

質問 6：
Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

正解：

Explanation:
1. click on compliance standard.
2. add custom compliance standard.
3. edit policies.
4. add compliance standard from drop-down menu
https://docs.prismacloudcompute.com/docs/enterprise_edition/compliance/custom_compliance_checks.html#cre The process of mapping a policy to a custom compliance standard in a security platform like Prisma Cloud by Palo Alto Networks involves several specific steps. Firstly, one must access the compliance standards, which is typically done by clicking on the "Compliance Standards" section within the platform's interface. This is where all standards, including custom and predefined ones, are listed.
Next, if the custom compliance standard does not already exist, it must be created. This step involves defining the criteria and controls that make up the standard, tailored to the organization's specific requirements.
Once the custom compliance standard is in place, the policy in question needs to be edited. This editing process would involve configuring the policy to align with the compliance controls outlined in the custom standard, ensuring that the policy will enforce or check for the necessary requirements as defined by the standard.
Finally, the last step is to formally associate or map the edited policy with the custom compliance standard.
This is typically done by adding the policy to the standard, which may involve selecting the custom compliance standard from a drop-down menu within the policy settings, confirming that this particular policy should be enforced as part of the compliance checks for that standard.
This ordered process ensures that policies are properly aligned with the organization's compliance goals and can be enforced and reported on accurately within the security platform.

質問 7：
Which two statements apply to the Defender type Container Defender - Linux?
A. It is deployed as a service.
B. It is implemented as runtime protection in the userspace.
C. It is deployed as a container.
D. It is incapable of filesystem runtime defense.
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which statement is true about obtaining Console images for Prisma Cloud Compute Edition?
A. To retrieve Prisma Cloud Console images using basic auth:
1.Access registry.paloaltonetworks.com, and authenticate using 'docker login'.
2.Retrieve the Prisma Cloud Console images using 'docker pull'.
B. To retrieve Prisma Cloud Console images using basic auth:
1.Access registry.twistlock.com, and authenticate using 'docker login'.
2.Retrieve the Prisma Cloud Console images using 'docker pull'.
C. To retrieve Prisma Cloud Console images using URL auth:
1.Access registry-url-auth.twistlock.com, and authenticate using the user certificate.
2.Retrieve the Prisma Cloud Console images using 'docker pull'.
D. To retrieve Prisma Cloud Console images using URL auth:
1.Access registry-auth.twistlock.com, and authenticate using the user certificate.
2.Retrieve the Prisma Cloud Console images using 'docker pull'.
正解：B
解説: (Topexam メンバーにのみ表示されます)