최신 PCCSE 무료덤프 - Palo Alto Networks Prisma Certified Cloud Security Engineer
Which options show the steps required to upgrade Console when using projects?
정답: D
설명: (DumpTOP 회원만 볼 수 있음)
In Azure, what permissions need to be added to Management Groups to allow Prisma Cloud to calculate net effective permissions?
정답: D
설명: (DumpTOP 회원만 볼 수 있음)
What is the correct method for ensuring key-sensitive data related to SSNs and credit card numbers cannot be viewed in Dashboard > Data view during investigations?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
What is a benefit of the Cloud Discovery feature?
정답: B
설명: (DumpTOP 회원만 볼 수 있음)
The InfoSec team wants to be notified via email each time a Security Group is misconfigured. Which Prisma Cloud tab should you choose to complete this request?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
Which statement applies to Adoption Advisor?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
An administrator wants to retrieve the compliance policies for images scanned in a continuous integration (CI) pipeline.
Which endpoint will successfully execute to enable access to the images via API?
Which endpoint will successfully execute to enable access to the images via API?
정답: D
설명: (DumpTOP 회원만 볼 수 있음)
An administrator sees that a runtime audit has been generated for a container.
The audit message is:
"/bin/ls launched and is explicitly blocked in the runtime rule. Full command: ls -latr" Which protection in the runtime rule would cause this audit?
The audit message is:
"/bin/ls launched and is explicitly blocked in the runtime rule. Full command: ls -latr" Which protection in the runtime rule would cause this audit?
정답: D
설명: (DumpTOP 회원만 볼 수 있음)
Which two information types cannot be seen in the data security dashboard? (Choose two).
정답: B,C
설명: (DumpTOP 회원만 볼 수 있음)
A customer has serverless functions that are deployed in multiple clouds.
Which serverless cloud provider is covered be "overly permissive service access" compliance check?
Which serverless cloud provider is covered be "overly permissive service access" compliance check?
정답: B
Match the service on the right that evaluates each exposure type on the left.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
정답:
What is the primary purpose of Prisma Cloud Code Security?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
Which three platforms support the twistcli tool? (Choose three.)
정답: A,C,D
설명: (DumpTOP 회원만 볼 수 있음)
A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which three options could have generated this audit? (Choose three.)
정답: A,B,C
설명: (DumpTOP 회원만 볼 수 있음)
What is the purpose of Incident Explorer in Prisma Cloud Compute under the "Monitor" section?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
Which data storage type is supported by Prisma Cloud Data Security?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
Match the correct scanning mode for each given operation.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)
정답:
Explanation:
* Create SNS Topic Triggers: No data security scan
* Select an S3 bucket: Forward Scan only
* Select an S3 bucket with existing files: Forward or Backward Scan
* Link an S3 logging to CloudTrail: Backward Scan only
The scanning mode for Data Security in AWS typically depends on the configuration and the desired outcomes for monitoring and protecting data within S3 buckets.
Creating SNS Topic Triggers is a configuration step that does not directly involve scanning. It is part of setting up notifications for events in S3 buckets, but on its own, it does not initiate a data security scan.
Selecting an S3 bucket without specifying existing files typically implies that you intend to scan new objects as they are added to the bucket, which is known as a Forward Scan. This mode is proactive and scans files upon their arrival in the bucket.
When you select an S3 bucket with existing files, you can perform either Forward Scanning for new files or Backward Scanning to scan all existing files in the bucket. This option provides the most comprehensive scanning coverage for both new and existing data.
Linking an S3 logging to CloudTrail is usually a step taken to monitor access and changes to S3 resources. In the context of scanning, linking S3 to CloudTrail does not initiate a scan, but the CloudTrail logs can be used to trigger a Backward Scan if configured to do so, which scans historical files in the bucket based on CloudTrail events.