CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCCSE

Free PCCSE Exam Braindumps (page: 14)

Page 13 of 63
PDF with 260 Questions

A customer has Defenders connected to Prisma Cloud Enterprise. The Defenders are deployed as a DaemonSet in OpenShift.

How should the administrator get a report of vulnerabilities on hosts?

  1. Navigate to Monitor > Vulnerabilities > CVE Viewer
  2. Navigate to Defend > Vulnerabilities > VM Images
  3. Navigate to Defend > Vulnerabilities > Hosts
  4. Navigate to Monitor > Vulnerabilities > Hosts

Answer(s): D

Explanation:

To view the vulnerabilities identified on a host, navigating to the "Monitor > Vulnerabilities > Hosts" section within the Prisma Cloud Console is the correct approach. This section is specifically designed to provide a comprehensive overview of all detected vulnerabilities within the host environment, offering detailed insights into each vulnerability's nature, severity, and potential impact. This pathway allows users to efficiently assess the security posture of their hosts, prioritize vulnerabilities based on their severity, and take appropriate remediation actions. The "Hosts" section under "Vulnerabilities" is tailored to display vulnerabilities related to host configurations, installed software, and other host-level security concerns, making it the ideal location within the Prisma Cloud Console for this purpose.



DRAG DROP (Drag and Drop is not supported)
Order the steps involved in onboarding an AWS Account for use with Data Security feature.

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Create CloudTrail with S3 as storage
Enter SNS Topic in CloudTrail
Enter RoleARN and SNSARN
Create Stack
Comprehensive Detailed explanation
Onboarding an AWS account for use with the Data Security feature involves setting up AWS CloudTrail to monitor API calls and log the data to an Amazon S3 bucket, which is essential for auditing and security purposes.
The first step in the onboarding process is to create an AWS CloudTrail with S3 as the storage destination. This is where all the CloudTrail logs will be collected and stored. The S3 bucket must be properly configured to receive and store logs.
After setting up CloudTrail, the next step is to enter the Amazon Simple Notification Service (SNS) topic in CloudTrail. This step involves specifying an SNS topic that CloudTrail will use to send notifications of log file delivery to the specified S3 bucket. The third step is to enter the Role Amazon Resource Name (RoleARN) and the SNS Amazon Resource Name (SNSARN). RoleARN refers to the IAM role that grants permissions to the CloudTrail to access resources, while SNSARN is the identifier for the SNS topic created in the previous step. Finally, the last step is to create a stack, which typically refers to deploying a CloudFormation template or another infrastructure as code service in AWS. This stack will set up all the necessary resources and configurations automatically, including the correct permissions and settings for the Data Security feature to function correctly.
These steps ensure that the AWS account is properly configured to capture and store API call logs and to notify the appropriate systems or personnel when specific events occur, thereby enhancing data security monitoring and compliance.



A customer has a requirement to scan serverless functions for vulnerabilities.

Which three settings are required to configure serverless scanning? (Choose three.)

  1. Defender Name
  2. Region
  3. Credential
  4. Console Address
  5. Provider

Answer(s): B,C,E

Explanation:

To configure serverless scanning in a cloud security platform like Prisma Cloud, the system needs to know where (Region) the serverless functions are deployed, how to access them (Credential), and on which cloud platform they are running (Provider). These settings ensure that the scanning tool can accurately locate and authenticate to the serverless functions across different cloud environments for vulnerability assessment. This aligns with the principle of providing comprehensive visibility and consistent security across multi-cloud environments as outlined in the "Guide to Cloud Security Posture Management Tools" document.


Reference:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/21-04/prisma-cloud-compute- edition- admin/vulnerability_management/serverless_functions.html



You are tasked with configuring a Prisma Cloud build policy for Terraform.
What type of query is necessary to complete this policy?

  1. YAML
  2. JSON
  3. CloudFormation
  4. Terraform

Answer(s): D

Explanation:

When configuring a Prisma Cloud build policy specifically for Terraform, the type of query necessary is Terraform. Terraform is an infrastructure as code (IaC) tool that allows users to define and provision cloud infrastructure using a declarative configuration language. Prisma Cloud can analyze Terraform templates to identify potential security risks and misconfigurations before the infrastructure is provisioned, aligning with the best practices for integrating security into the application development pipeline and ensuring secure cloud configurations from the start.






Post your Comments and Discuss Palo Alto Networks PCCSE exam with other Community members:

PCCSE Discussions & Posts