[2026] Palo Alto Networks Prisma Certified Cloud Security Engineer

문제1

Which two integrated development environment (IDE) plugins are supported by Prisma Cloud as part of its Code Security? (Choose two.)

A. BitBucket

B. Visual Studio Code

C. IntelliJ

D. CircleCI

정답: B,C

설명: (Fast2test 회원만 볼 수 있음)

문제2

What is a benefit of the Cloud Discovery feature?

A. It offers coverage for serverless functions on AWS only.

B. It does not require any specific permissions to be granted before use.

C. It helps engineers find all cloud-native services being used only on AWS.

D. It enables engineers to continuously monitor all accounts and report on the services that are unprotected.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제3

The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely.
Which strategy should the administrator use to achieve this goal?

A. Set the Alert Disposition to Conservative

B. Change the Training Threshold to Low

C. Set Alert Disposition to Aggressive

D. Disable the policy

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제4

A user from an organization is unable to log in to Prisma Cloud Console after having logged in the previous day.
Which area on the Console will provide input on this issue?

A. SSO

B. Access Control

C. Users & Groups

D. Audit Logs

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제5

Which three types of runtime rules can be created? (Choose three.)

A. Processes

B. Waas-request

C. Kubernetes-audit

D. Network-outgoing

E. Filesystem

정답: A,D,E

설명: (Fast2test 회원만 볼 수 있음)

문제6

Which RQL query will help create a custom identity and access management (1AM) policy to alert on Lambda functions that have permission to terminate EC2 instances?

A. iam from cloud.resource where cloud.type equals 'AWS' AND cloud.resource.type equals 'lambda function' AND cloud.service.name = 'ec2' AND action.name equals 'ec2:TerminateInstances'

B. iam from cloud.resource where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name =
'ec2:TerminateInstances'

C. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name =
'ec2:TerminateInstances'

D. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'ec2' AND source.cloud.resource.type = 'instance' AND dest.cloud.service.name = 'lambda' AND action.name =
'ec2:TerminateInstances'

정답: C

문제7

Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in Azure cloud? (Choose two.)

A. SB_QUEUE_KEY

B. SQS_QUEUE_NAME

C. YOUR_ACCOUNT_NUMBER

D. API_ENDPOINT

정답: A,D

설명: (Fast2test 회원만 볼 수 있음)

문제8

What are the two ways to scope a CI policy for image scanning? (Choose two.)

A. container name

B. hostname

C. image name

D. image labels

정답: C,D

문제9

Which two CI/CD plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.).

A. BitBucket

B. Visual Studio Code

C. IntelliJ

D. CircleCI

정답: A,D

설명: (Fast2test 회원만 볼 수 있음)

문제10

A customer has Defenders connected to Prisma Cloud Enterprise. The Defenders are deployed as a DaemonSet in OpenShift.
How should the administrator get a report of vulnerabilities on hosts?

A. Navigate to Monitor > Vulnerabilities > Hosts

B. Navigate to Monitor > Vulnerabilities > CVE Viewer

C. Navigate to Defend > Vulnerabilities > VM Images

D. Navigate to Defend > Vulnerabilities > Hosts

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제11

Which IAM Azure RQL query would correctly generate an output to view users who have sufficient permissions to create security groups within Azure AD and create applications?

A. config from network where api.name = 'azure-active-directory-authorization-policy' AND json.rule = defaultUserRolePermissions.allowedToCreateSecurityGroups is false and defaultUserRolePermissions.allowedToCreateApps is true

B. config where api.name = 'azure-active-directory-authorization-policy' AND json.rule = defaultUserRolePermissions.allowedToCreateSecurityGroups is true and defaultUserRolePermissions.allowedToCreateApps is true

C. config from cloud.resource where api.name = 'azure-active-directory-authorization-policy' AND json.rule = defaultUserRolePermissions.allowedToCreateSecurityGroups is true and defaultUserRolePermissions.allowedToCreateApps is true

D. config from cloud.resource where api.name = 'azure-active-directory-authorization-policy' AND json.rule = defaultUserRolePermissions exists

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제12

Which three OWASP protections are part of Prisma Cloud Web-Application and API Security (WAAS) rule?
(Choose three.)

A. Local file inclusion

B. SQL injection

C. Shellshock

D. Suspicious binary

E. DoS Protection

정답: A,B,C

설명: (Fast2test 회원만 볼 수 있음)

문제13

You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account.
Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully.
Why are no alerts being generated?

A. The public cloud account is not associated with an alert notification.

B. The public cloud account does not have audit trail ingestion enabled.

C. The public cloud account does not access to configuration resources.

D. The public cloud account is not associated with an alert rule.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

Palo Alto Networks Prisma Certified Cloud Security Engineer - PCCSE무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트