Free Demo Questions

Test Online Free Palo Alto Networks PCCSE Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free PCCSE question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated Apr 17, 2024 43 Questions 3 Pages

Get PCCSE Full Access

Question 31 Selectable Answer

Which two bot types are part of Web Application and API Security (WAAS) bot protection? (Choose two.)

A. Chat bots
B. User-defined bots
C. Unknown bots
D. Customer bots

Answer:

Question 32 Selectable Answer

A Prisma Cloud administrator is tasked with pulling a report via API. The Prisma Cloud tenant is located on app2.prismacloud.io.
What is the correct API endpoint?

A. https://api.prismacloud.io
B. https://api2.eu.prismacloud.io
C. httsp://api.prismacloud.cn
D. https://api2.prismacloud.io

Answer:
Explanation:
https://prisma.pan.dev/api/cloud/api-urls/

Question 33 Selectable Answer

A customer has a requirement to automatically protect all Lambda functions with runtime protection.
What is the process to automatically protect all the Lambda functions?

A. Configure a function scan policy from the Defend/Vulnerabilities/Functions page.
B. Configure serverless radar from the Defend/Compliance/Cloud Platforms page.
C. Configure a manually embedded Lambda Defender.
D. Configure a serverless auto-protect rule for the functions.

Answer:
Explanation:
Reference: https://blog.paloaltonetworks.com/prisma-cloud/protect-serverless-functions/

Question 34 Selectable Answer

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.
Which type of policy should be created to protect this pod from Layer7 attacks?

A. The development team should create a WAAS rule for the host where these pods will be running.
B. The development team should create a WAAS rule targeted at all resources on the host.
C. The development team should create a runtime policy with networking protections.
D. The development team should create a WAAS rule targeted at the image name of the pods.

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/waas-intro.html

Question 35 Written Answer

DRAG DROP
An administrator needs to write a script that automatically deactivates access keys that have not been used for 30 days.
In which order should the API calls be used to accomplish this task? (Drag the steps into the correct order from the first step to the last.) Select and Place:

Answer:

Explanation:
A picture containing graphical user interface
Description automatically generated

Question 36 Selectable Answer

The exclamation mark on the resource explorer page would represent?

A. resource has been deleted
B. the resource was modified recently
C. resource has alerts
D. resource has compliance violation

Answer:

Question 37 Selectable Answer

A customer has a development environment with 50 connected Defenders. A maintenance window is set for Monday to upgrade 30 stand-alone Defenders in the development environment, but there is no maintenance window available until Sunday to upgrade the remaining 20 stand-alone Defenders.
Which recommended action manages this situation?

A. Go to Manage > Defender > Manage, then click Defenders, and use the Scheduler to choose which Defenders will be automatically upgraded during the maintenance window.
B. Find a maintenance window that is suitable to upgrade all stand-alone Defenders in the development environment.
C. Upgrade a subset of the Defenders by clicking the individual Actions > Upgrade button in the row that corresponds to the Defender that should be upgraded during the maintenance window.
D. Open a support case with Palo Alto Networks to arrange an automatic upgrade.

Answer:

Question 38 Selectable Answer

A customer has Defenders connected to Prisma Cloud Enterprise. The Defenders are deployed as a DaemonSet in OpenShift.
How should the administrator get a report of vulnerabilities on hosts?

A. Navigate to Monitor > Vulnerabilities > CVE Viewer
B. Navigate to Defend > Vulnerabilities > VM Images
C. Navigate to Defend > Vulnerabilities > Hosts
D. Navigate to Monitor > Vulnerabilities > Hosts

Answer:

Question 39 Selectable Answer

Which intensity setting for anomaly alerts is used for the measurement of 100 events over 30 days?

A. High
B. Medium
C. Low
D. Very High

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-administrators/define-prisma-cloud-enterprise-settings.html

Question 40 Selectable Answer

A customer wants to harden its environment from misconfiguration.
Prisma Cloud Compute Compliance enforcement for hosts covers which three options? (Choose three.)

A. Docker daemon configuration files
B. Docker daemon configuration
C. Host cloud provider tags
D. Host configuration
E. Hosts without Defender agents

Answer:

Question 41 Selectable Answer

Which of the following is displayed in the asset inventory?

A. EC2 instances
B. Asset tags
C. SSO users
D. Federated users

Answer:

Question 42 Selectable Answer

Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?

A. The console cannot natively run in an ECS cluster. A onebox deployment should be used.
B. Download and extract the release tarball Ensure that each node has its own storage for Console data Create the Console task definition Deploy the task definition
C. Download and extract release tarball Download task from AWS Create the Console task definition Deploy the task definition
D. Download and extract the release tarball Create an EFS file system and mount to each node in the cluster Create the Console task definition Deploy the task definition

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/19-11/prisma-cloud-compute-edition-admin/install/install_amazon_ecs.html

Question 43 Selectable Answer

Which alert deposition severity must be chosen to generate low and high severity alerts in the Anomaly settings when user wants to report on an unknown browser and OS, impossible time travel, or both due to account hijacking attempts?

A. High
B. Aggressive
C. Moderate
D. Conservative

Answer:

Current Exam

PCCSE

Palo Alto Networks
Prisma Certified Cloud Security Engineer

View Full PCCSE Package