Free Demo Questions

Test Online Free Palo Alto Networks PCCSE Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free PCCSE question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated Apr 17, 2024 43 Questions 3 Pages

Get PCCSE Full Access

Question 16 Selectable Answer

Which two IDE plugins are supported by Prisma Cloud as part of its DevOps Security? (Choose two.)

A. BitBucket
B. Visual Studio Code
C. CircleCI
D. IntelliJ

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-devops-security/prisma-cloud-plugins.html

Question 17 Selectable Answer

You are tasked with configuring a Prisma Cloud build policy for Terraform.
What type of query is necessary to complete this policy?

A. YAML
B. JSON
C. CloudFormation
D. Terraform

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy/prisma-cloud-create-config-build-policy.html

Question 18 Selectable Answer

Which of the below actions would indicate C “The timestamp on the compliance dashboard?

A. indicates the most recent data
B. indicates the most recent alert generated
C. indicates when the data was ingested
D. indicates when the data was aggregated for the results displayed

Answer:

Question 19 Selectable Answer

An administrator has added a Cloud account on Prisma Cloud and then deleted it.
What will happen if the deleted account is added back on Prisma Cloud within a 24-hour period?

A. No alerts will be displayed.
B. Existing alerts will be displayed again.
C. New alerts will be generated.
D. Existing alerts will be marked as resolved.

Answer:

Question 20 Selectable Answer

Which option shows the steps to install the Console in a Kubernetes Cluster?

A. Download the Console and Defender image Generate YAML for Defender Deploy Defender YAML using kubectl
B. Download and extract release tarball Generate YAML for Console Deploy Console YAML using kubectl
C. Download the Console and Defender image Download YAML for Defender from the document site Deploy Defender YAML using kubectl
D. Download and extract release tarball Download the YAML for Console Deploy Console YAML using kubectl

Answer:

Question 21 Selectable Answer

What is the default namespace created by Defender DaemonSet during deployment?

A. Redlock
B. Defender
C. Twistlock
D. Default

Answer:

Question 22 Selectable Answer

An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console on the default service endpoint and will be exporting to YAML.
Console Address: $CONSOLE_ADDRESS Websocket Address:
$WEBSOCKET_ADDRESS User: $ADMIN_USER
Which command generates the YAML file for Defender install?

A. <PLATFORM>/twistcli defender \ --address $CONSOLE_ADDRESS \ --user $ADMIN_USER \ --cluster-address $CONSOLE_ADDRESS
B. <PLATFORM>/twistcli defender export kubernetes \ --address $WEBSOCKET_ADDRESS \ --user $ADMIN_USER \ --cluster-address $CONSOLE_ADDRESS
C. <PLATFORM>/twistcli defender YAML kubernetes \ --address $CONSOLE_ADDRESS \ --user $ADMIN_USER \ --cluster-address $WEBSOCKET_ADDRESS
D. <PLATFORM>/twistcli defender export kubernetes \ --address $CONSOLE_ADDRESS \ --user $ADMIN_USER \ --cluster-address $WEBSOCKET_ADDRESS

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/install/install_kubernetes.html

Question 23 Selectable Answer

Which file extension type is supported for Malware scanning in Prisma Cloud Data Security (PCDS)?

A. .bat
B. .apk
C. .vb
D. .py

Answer:

Question 24 Selectable Answer

A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time.
What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)

A. manual installation of the latest twistcli tool prior to the rolling upgrade
B. all Defenders set in read-only mode before execution of the rolling upgrade
C. a second location where you can install the Console
D. additional workload licenses are required to perform the rolling upgrade
E. an existing Console at version n-1

Answer:

Question 25 Selectable Answer

A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)

A. user manually changed the alert status.
B. policy was changed.
C. resource was deleted.
D. alert was sent to an external integration.

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/prisma-cloud-alert-resolution-reasons.html

Question 26 Selectable Answer

A customer has multiple violations in the environment including:
User namespace is enabled
An LDAP server is enabled
SSH root is enabled
Which section of Console should the administrator use to review these findings?

A. Manage
B. Vulnerabilities
C. Radar
D. Compliance

Answer:

Question 27 Selectable Answer

An administrator wants to enforce a rate limit for users not being able to post five (5) .tar.gz files within five (5) seconds.
What does the administrator need to configure?

A. A ban for DoS protection with an average rate of 5 and file extensions match on .tar.gz on WAAS
B. A ban for DoS protection with a burst rate of 5 and file extensions match on .tar.gz on CNNF
C. A ban for DoS protection with a burst rate of 5 and file extensions match on .tar gz on WAAS
D. A ban for DoS protection with an average rate of 5 and file extensions match on .tar.gz on CNNF

Answer:

Question 28 Selectable Answer

Which role does Prisma Cloud play when configuring SSO?

A. JIT
B. Service provider
C. SAML
D. Identity provider issuer

Answer:

Question 29 Selectable Answer

What are the two ways to scope a CI policy for image scanning? (Choose two.)

A. container name
B. image name
C. hostname
D. image labels

Answer:
Explanation:
Reference: https://www.optiv.com/insights/source-zero/blog/defending-against-container-threats-palo-alto-prisma-cloud

Question 30 Selectable Answer

An administrator has a requirement to ingest all Console and Defender logs to Splunk.
Which option will satisfy this requirement in Prisma Cloud Compute?

A. Enable the API settings for logging.
B. Enable the CSV export in the Console.
C. Enable the syslog option in the Console
D. Enable the Splunk option in the Console.

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/audit/logging.html

Current Exam

PCCSE

Palo Alto Networks
Prisma Certified Cloud Security Engineer

View Full PCCSE Package