A customer wants to be notified about port scanning network activities in their environment. Which policy type detects this behavior?
Answer(s): C
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies
A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.Which port should the team specify in the CNAF rule to protect the application?
https://docs.paloaltonetworks.com/prisma/prisma-cloud/19-11/prisma-cloud-compute-edition-admin/firewalls/deploy_cnafWhen configuring Cloud Native Application Firewall (CNAF) rules, the specified port should be the one where the container itself listens for web traffic. In this scenario, since the NGINX container is listening on port 8080, the CNAF rule should be configured to protect traffic on port 8080. This ensures that the firewall rule is applied to the traffic intended for the container, regardless of the port mapping on the host.The documentation from Palo Alto Networks provides guidance on deploying CNAF and specifies that the port in the firewall rule should match the container’s listening port, not the host’s mapped port. This is an important distinction for properly securing containerized applications with CNAF.
Which three types of buckets exposure are available in the Data Security module? (Choose three.)
Answer(s): A,B,E
In the Data Security module of cloud security platforms like Prisma Cloud, the types of bucket exposures typically include Public (option A), Private (option B), and Conditional (option E). Public buckets are accessible by anyone on the internet, posing a significant data leakage risk. Private buckets are restricted to authorized users only, offering a higher level of security. Conditional exposure involves buckets that may be accessible under certain conditions or to specific users, requiring careful configuration and policy enforcement to prevent unauthorized access. International (option C) and Differential (option D) do not represent standard types of bucket exposures in cloud security contexts.
The administrator wants to review the Console audit logs from within the Console.Which page in the Console should the administrator use to review this data, if it can be reviewed at all?
Answer(s): D
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/audit/audit_admin_activity
DRAG DROP (Drag and Drop is not supported)What is the order of steps to create a custom network policy?(Drag the steps into the correct order of occurrence, from the first step to the last.)
Answer(s): A
A picture containing table Description automatically generated
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a- policy.htmlSelect Policies and click Add PolicyBuild the queryAdd the compliance standardsClick Submit.https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy
Post your Comments and Discuss Palo Alto Networks CloudSec-Pro exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CloudSec-Pro content, but please register or login to continue.