QUESTION: 29

Given this information:
The Console is located at https://prisma-console.mydomain.local The username is: cluster The password is: password123
The image to scan is: myimage:latest

Which twistcli command should be used to scan a Container for vulnerabilities and display the details about each vulnerability?

twistcli images scan --console-address https://prisma-console.mydomain.local -u cluster -p password123 -- details myimage:latest
twistcli images scan --console-address prisma-console.mydomain.local -u cluster -p password123 -
- vulnerability-details myimage:latest
twistcli images scan --address prisma-console.mydomain.local -u cluster -p password123 -- vulnerability- details myimage:latest
twistcli images scan --address https://prisma-console.mydomain.local -u cluster -p password123 -- details myimage:latest

Answer(s): D

Explanation:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin- compute/tools/twistcli_scan_images

Reveal Solution Next Question

QUESTION: 30

The development team wants to block Cross Site Scripting attacks from pods in its environment. How should the team construct the CNAF policy to protect against this attack?

create a Host CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to "prevent".
create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to alert.
create a Container CNAF policy, targeted at a specific resource, check the box for XSS protection, and set the action to prevent.
create a Container CNAF policy, targeted at a specific resource, and they should set "Explicitly allowed inbound IP sources" to the IP address of the pod.

Answer(s): C

Explanation:

To protect pods in an environment from Cross-Site Scripting (XSS) attacks, the development team should create a Container Cloud Native Application Firewall (CNAF) policy. This policy should be targeted at the specific resource (e.g., a particular pod or set of pods), with the option for XSS protection checked, and the action set to "prevent." This configuration ensures that any XSS attacks directed at the targeted containers are effectively blocked.

Reveal Solution Next Question

QUESTION: 31

The Prisma Cloud administrator has configured a new policy.

Which steps should be used to assign this policy to a compliance standard?

Edit the policy, go to step 3 (Compliance Standards), click + at the bottom, select the compliance standard, fill in the other boxes, and then click Confirm.
Create the Compliance Standard from Compliance tab, and then select Add to Policy.
Open the Compliance Standards section of the policy, and then save.
Custom policies cannot be added to existing standards.

Answer(s): A

Explanation:

To assign a new policy to a compliance standard in Prisma Cloud, the administrator needs to edit the policy and navigate to the step where compliance standards are managed. By clicking the '+' button, the administrator can add the policy to a specific compliance standard, provide necessary details, and confirm the assignment. This integrates the custom policy into the chosen compliance standard, ensuring that compliance checks include the newly defined policy criteria.

Reveal Solution Next Question

QUESTION: 32

An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console on the default service endpoint and will be exporting to YAML.

Console Address: $CONSOLE_ADDRESS Websocket Address: $WEBSOCKET_ADDRESS User:
$ADMIN_USER

Which command generates the YAML file for Defender install?

<PLATFORM>/twistcli defender \
--address $CONSOLE_ADDRESS \
--user $ADMIN_USER \
--cluster-address $CONSOLE_ADDRESS
<PLATFORM>/twistcli defender export kubernetes \
--address $WEBSOCKET_ADDRESS \
--user $ADMIN_USER \

--cluster-address $CONSOLE_ADDRESS
<PLATFORM>/twistcli defender YAML kubernetes \
--address $CONSOLE_ADDRESS \
--user $ADMIN_USER \
--cluster-address $WEBSOCKET_ADDRESS
<PLATFORM>/twistcli defender export kubernetes \
--address $CONSOLE_ADDRESS \
--user $ADMIN_USER \
--cluster-address $WEBSOCKET_ADDRESS

Answer(s): D

Explanation:

The correct command to generate the YAML file for Defender install in a Kubernetes cluster, considering the console and websocket addresses, as well as the admin user, would typically involve specifying the addresses and user details. The option D seems most aligned with standard practices for such commands, where you export the Defender configuration for Kubernetes, specifying the console and websocket addresses along with the user details.

Reference:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin- compute/install/ install_kubernetes.html

Reveal Solution Next Question

Free PCCSE Exam Braindumps (page: 8)

QUESTION: 29

Explanation:

QUESTION: 30

Explanation:

QUESTION: 31

Explanation:

QUESTION: 32

Explanation:

Reference: