DRAG DROP (Drag and Drop is not supported)Move the steps to the correct order to set up and execute a serverless scan using AWS DevOps.
Answer(s): A
Graphical user interface, text, application Description automatically generated
A customer has a requirement to scan serverless functions for vulnerabilities.What is the correct option to configure scanning?
Answer(s): C
In Prisma Cloud, the capability to scan serverless functions, such as AWS Lambda functions, for vulnerabilities is an integral part of ensuring cloud security posture management (CSPM) and compliance. Specifically, option C is correct because Prisma Cloud provides a dedicated section for defining policies related to serverless function vulnerabilities under the "Defend > Vulnerabilities > Functions" page. This feature allows administrators to create and manage policies that automatically scan serverless functions for known vulnerabilities, ensuring that the functions comply with the organization's security standards before they are deployed. This approach aligns with Prisma Cloud's comprehensive security model that covers various aspects of cloud security, including serverless functions, as outlined in the "Guide to Cloud Security Posture Management Tools" documenthttps://docs.paloaltonetworks.com/prisma/prisma-cloud/22-12/prisma-cloud-compute-edition-admin/vulnerability_management/serverless_functions
An administrator has been tasked with a requirement by your DevSecOps team to write a script to continuously query programmatically the existing users, and the user’s associated permission levels, in a Prisma Cloud Enterprise tenant.Which public documentation location should be reviewed to help determine the required attributes to carry out this step?
Answer(s): B
Prisma Cloud has a REST API that enables you to access Prisma Cloud features programmatically.Most actions supported on the Prisma Cloud web interface are available with the REST API, refer to the Prisma Cloud REST API Reference for details about the REST API. https://pan.dev/prisma-cloud/api/cspm/For scripting and programmatically querying user data and associated permission levels in a Prisma Cloud Enterprise tenant, the Prisma Cloud API Reference is the most relevant documentation. This reference guide provides detailed information on the available APIs, including those for user and permissions management. It outlines the necessary attributes, endpoints, and methods required to programmatically interact with the Prisma Cloud platform.The API Reference is designed to help developers and administrators understand how to leverage the Prisma Cloud APIs to automate tasks, such as querying existing users and their permission levels. It includes examples and explanations that are crucial for writing effective scripts that integrate with the Prisma Cloud infrastructure.While the Administrator’s Guides provide valuable information on managing the platform, the API Reference is specifically tailored for developers looking to automate and script interactions with Prisma Cloud services. Therefore, reviewing the Prisma Cloud API Reference will provide the necessary details to fulfill the DevSecOps team’s requirement1.
When would a policy apply if the policy is set under Defend > Vulnerability > Images > Deployed?
In Prisma Cloud, policies set under "Defend > Vulnerability > Images > Deployed" are specifically designed to apply at runtime, i.e., when a container is instantiated from an image. This ensures that any image, regardless of its point of origin or creation time, is evaluated against the defined vulnerability policies at the time it is deployed as a container in the environment. This runtime enforcement is crucial for catching vulnerabilities that may not have been present or detected during the image build phase, providing an additional layer of security for running applications.https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-12/prisma-cloud-compute-edition-admin/vulnerability_management/vuln_management_rules
Which two required request headers interface with Prisma Cloud API? (Choose two.)
Answer(s): A,B
https://prisma.pan.dev/api/cloud/api-headers/Interfacing with the Prisma Cloud API, especially for tasks such as automation, integration, and advanced querying, requires specific request headers for authentication and data format specification. "Content-type:application/json" is essential for indicating that the request body is formatted as JSON, which is a widely accepted data interchange format. The "x-redlock-auth" header is critical for passing the API access key or token, which authenticates the request to Prisma Cloud's API. This authentication mechanism ensures secure access to Prisma Cloud's capabilities while maintaining the integrity and confidentiality of the interactions.
Post your Comments and Discuss Palo Alto Networks CloudSec-Pro exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CloudSec-Pro content, but please register or login to continue.