Download Exam PCCSE Practice Test Questions with 100% Verified Answers [Q14-Q29] : Top Exam Collection : http://blog.topexamcollection.com

FRAGE 14
A Prisma Cloud administrator is tasked with pulling a report via API The Prisma Cloud tenant is located on app2.pnsmacfoudjo. What is the correct API endpoint?

https //api2-prismacloud io

https://api.prismactoud.io

https://api2eu-prismacioud.io

https://api pnsmacloud.cn

FRAGE 15
What is the order of steps in a Jenkins pipeline scan?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

FRAGE 16
Which options show the steps are required to upgrade Console when using projects?

Upgrade Defender
Upgrade Central Console
Upgrade Supervisor Consoles

Upgrade all Supervisors Consoles
Upgrade Central Console

Upgrade Central Console
Upgrade all Supervisor Consoles

Upgrade Central Console
Upgrade Central Console Defenders

FRAGE 17
Match the correct scanning mode for each given operation.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

FRAGE 18
You wish to create a custom policy with build and run subtypes. Match the query types for each example.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

FRAGE 19
On which cloud service providers can you receive new API release information for Prisma Cloud?

AWS, Azure, GCP, Oracle, Alibaba

AWS, Azure, GCP, IBM

AWS, Azure, GCP, IBM, Alibaba

AWS, Azure, GCP, Oracle, IBM

FRAGE 20
Which port should a security team use to pull data from Console’s API?

8084

8083

FRAGE 21
What will happen when a Prisma Cloud Administrator has configured agentless scanning in an environment that also has Host and Container Defenders deployed?

Agentless scans do not conflict with Defender scans, so both will run.

Both agentless and Defender scans will be disabled and an error message will be received.

Agentless scan will automatically be disabled, so Defender scans are the only scans occurring.

Defender scans will automatically be disabled, so agentless scans are the only scans occurring.

FRAGE 22
Which two processes ensure that builds can function after a Console upgrade? (Choose two )

updating any build environments that have twistcli included to use the latest version

configuring build pipelines to download twistcli at the start of each build

creating a new policy that allows older versions of twistcli to connect the Console

allowing Jenkins to automatically update the plugin

FRAGE 23
Which alerts are fixed by enablement of automated remediation?

All applicable open alerts regardless of when they were generated, with alert status updated to “resolved”

All applicable open alerts regardless of when they were generated, with alert status updated to “dismissed”

Only the open alerts that were generated before the enablement of remediation, with alert status updated to “resolved”

Only the open alerts that were generated after the enablement of remediation, with alert status updated to “resolved”

FRAGE 24
What is the correct method for ensuring key-sensitive data related to SSNs and credit card numbers cannot be viewed in Dashboard > Data view during investigations?

Go to Settings > Data > Data Patterns, search for SSN Pattern, edit it, and modify the proximity keywords.

Go to Policies > Data > Clone > Modify Objects containing Financial Information publicly exposed and change the file exposure to Private.

Go to Settings > Data > Snippet Masking and select Full Mask.

Go to Settings > Cloud Accounts > Edit Cloud Account > Assign Account Group and select a group with limited permissions.

FRAGE 25
A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed.
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

set the Container model to manual relearn and set the default runtime rule to block for process protection.

set the Container model to relearn and set the default runtime rule to prevent for process protection.

add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list, and set the action to “prevent”.

choose “copy into rule” for the Container, add a ransomWare process into the denied process list, and set the action to “block”.

FRAGE 26
The compliance team needs to associate Prisma Cloud policies with compliance frameworks. Which option should the team select to perform this task?

Einhaltung der Vorschriften

Politiken

Alert Rules

Custom Compliance

FRAGE 27
What are the two ways to scope a CI policy for image scanning? (Choose two.)

container name

image name

hostname

image labels

FRAGE 28
Which step is included when configuring Kubernetes to use Prisma Cloud Compute as an admission controller?

copy the admission controller configuration from the Console and apply it to Kubernetes

enable Kubernetes auditing from the Defend > Access > Kubernetes page in the Console

copy the Console address and set the config map for the default namespace

create a new namespace in Kubernetes called admission-controller.

FRAGE 29
Which “kind” of Kubernetes object is configured to ensure that Defender is acting as the admission controller?

MutatingWebhookConfiguration

DestinationRules

ValidatingWebhookConfiguration

PodSecurityPolicies