Cloud Security Engineer Certified Official Practice Test PCCSE - May-2024 [Q88-Q102] : Free Exams Dumps Materials : http://exams.dumpsmaterials.com

Q88. Based on the following information, which RQL query will satisfy the requirement to identify VM hosts deployed to organization public cloud environments exposed to network traffic from the internet and affected by Text4Shell RCE (CVE-2022-42889) vulnerability?
* Network flow logs from all virtual private cloud (VPC) subnets are ingested to the Prisma Cloud Enterprise Edition tenant.
* All virtual machines (VMs) have Prisma Cloud Defender deployed.

Q89. The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely.
Which strategy should the administrator use to achieve this goal?

Disable the policy

Set the Alert Disposition to Conservative

Change the Training Threshold to Low

Set Alert Disposition to Aggressive

Q90. The development team wants to block Cross Site Scripting attacks from pods in its environment. How should the team construct the CNAF policy to protect against this attack?

create a Host CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to “prevent”.

create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to alert.

create a Container CNAF policy, targeted at a specific resource, check the box for XSS protection, and set the action to prevent.

create a Container CNAF policy, targeted at a specific resource, and they should set “Explicitly allowed inbound IP sources” to the IP address of the pod.

Q91. A customer does not want alerts to be generated from network traffic that originates from trusted internal networks.
Which setting should you use to meet this customer’s request?

Trusted Login IP Addresses

Anomaly Trusted List

Trusted Alert IP Addresses

Enterprise Alert Disposition

Q92. Which field is required during the creation of a custom config query?

cloud.type

resource status

finding.type

api.name

Q93. During the Learning phase of the Container Runtime Model, Prisma Cloud enters a “dry run” period for how many hours?

1

24

48

4

Q94. What is an automatically correlated set of individual events generated by the firewall and runtime sensors to identify unfolding attacks?

policy

incident

audit

anomaly

Q95. Which two filters are available in the SecOps dashboard? (Choose two.)

Time range

Account Groups

Service Name

Cloud Region

Q96. Web-Application and API Security (WAAS) provides protection for which two protocols? (Choose two.)

Tomcat Web Connector via AJP

HTTP

SSH

TLS

Q97. Which role must be assigned to DevOps users who need access to deploy Container and Host Defenders in Compute?

Cloud Provisioning Admin

Build and Deploy Security

System Admin

Developer

Q98. The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.
Which type of policy should be created to protect this pod from Layer7 attacks?

The development team should create a WAAS rule for the host where these pods will be running.

The development team should create a WAAS rule targeted at all resources on the host.

The development team should create a runtime policy with networking protections.

The development team should create a WAAS rule targeted at the image name of the pods.

Q99. An administrator has been tasked with a requirement by your DevSecOps team to write a script to continuously query programmatically the existing users, and the user’s associated permission levels, in a Prisma Cloud Enterprise tenant.
Which public documentation location should be reviewed to help determine the required attributes to carry out this step?

Prisma Cloud Administrator’s Guide (Compute)

Prisma Cloud API Reference

Prisma Cloud Compute API Reference

Prisma Cloud Enterprise Administrator’s Guide

Q100. What are two built-in RBAC permission groups for Prisma Cloud? (Choose two.)

Group Membership Admin

Group Admin

Account Group Admin

Account Group Read Only

Q101. Which data security default policy is able to scan for vulnerabilities?

Objects containing Vulnerabilities

Objects containing Threats

Objects containing Malware

Objects containing Exploits

Q102. A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list and set the action to “prevent”.

choose “copy into rule” for the Container add a ransomWare process into the denied process list and set the action to “block”

set the Container model to manual relearn and set the default runtime rule to block for process protection.

set the Container model to relearn and set the default runtime rule to prevent for process protection.