[May-2022] Free PCCSE Exam Dumps to Improve Exam Score [Q49-Q69]

Q49. What is an example of an outbound notification within Prisma Cloud?

Q50. Review this admission control policy:

Which response to this policy will be achieved when the effect is set to “block”?

Q51. An S3 bucket within AWS has generated an alert by violating the Prisma Cloud Default policy “AWS S3 buckets are accessible to public”. The policy definition follows:
config where cloud.type = ‘aws’ AND api.name=’aws-s3api-get-bucket-acl’ AND json.rule=”((((acl.grants[? (@.grantee==’AllUsers’)] size > 0) or policyStatus.isPublic is true) and publicAccessBlockConfiguration does not exist) or ((acl.grants[?(@.grantee==’AllUsers’)] size > 0) and publicAccessBlockConfiguration.ignorePublicAcis is false) or (policyStatus.isPublic is true and publicAccessBlockConfiguration.restrictPublicBuckets is false)) and websiteConfiguration does not exist” Why did this alert get generated?

Q52. Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default.
Where should the customer navigate in Console?

Q53. Which three types of classifications are available in the Data Security module? (Choose three.)

Q54. Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?

Q55. A DevOps lead reviewed some system logs and notices some odd behavior that could be a data exfiltration attempt. The DevOps lead only has access to vulnerability data in Prisma Cloud Compute, so the DevOps lead passes this information to SecOps.
Which pages in Prisma Cloud Compute can the SecOps lead use to investigate the runtime aspects of this attack?

Q56. What is the behavior of Defenders when the Console is unreachable during upgrades?

Q57. Which container scan is constructed correctly?

Q58. Which option shows the steps to install the Console in a Kubernetes Cluster?

Q59. Given the following audit event activity snippet:

Which RQL will be triggered by the audit event?
A)

B)

C)

D)

Q60. How are the following categorized?
* Backdoor account access
* Hijacked processes
* Lateral movement
* Port scanning

Q61. An administrator sees that a runtime audit has been generated for a Container. The audit message is “DNS resolution of suspicious name wikipedia.com. type A”.
Why would this message appear as an audit?

Q62. A customer wants to harden its environment from misconfiguration.
Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

Q63. Which statement accurately characterizes SSO Integration on Prisma Cloud?

Q64. A customer wants to harden its environment from misconfiguration
Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

Q65. What are two ways to scan container images in Jenkins pipelines? (Choose two )

Q66. Given the following JSON query:
$.resource[*].aws_s3_bucket exists
Which tab is the correct place to add the JSON query when creating a Config policy?

Q67. A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment.
Which action needs to be set for “do not use privileged containers”?

Q68. Which statement about build and run policies is true?

Q69. You have onboarded a public cloud account into Prisma Cloud Enterprise Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules RQL statements on the Investigate matching those policies return config resource results successfully Why are no alerts being generated”