Free Palo Alto Networks CloudSec-Pro Exam Dumps Questions & Answers

A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment.
Which action needs to be set for "do not use privileged containers"?

• A.  Fail
• B.  Block
• C.  Prevent
• D.  Alert

A customer is deploying Defenders to a Fargate environment. It wants to understand the vulnerabilities in the image it is deploying.
How should the customer automate vulnerability scanning for images deployed to Fargate?

• A.  Use Cloud Compliance to identify misconfigured AWS accounts
• B.  Designate a Fargate Defender to serve a dedicated image scanner
• C.  Embed a Fargate Defender to automatically scan for vulnerabilities
• D.  Set up a vulnerability scanner on the registry

An administrator sees that a runtime audit has been generated for a host. The audit message is:
"Service postfix attempted to obtain capability SHELL by executing /bin/sh /usr/libexec/postfix/postfix- script.
stop. Low severity audit, event is automatically added to the runtime model" Which runtime host policy rule is the root cause for this runtime audit?

• A.  Default rule that alerts on capabilities
• B.  Custom rule with specific configuration for networking
• C.  Default rule that alerts on suspicious runtime behavior
• D.  Custom rule with specific configuration for file integrity

Given the following JSON query:
$.resource[*].aws_s3_bucket exists
Which tab is the correct place to add the JSON query when creating a Config policy?

• A.  Details
• B.  Remediation
• C.  Build Your Rule (Build tab)
• D.  Compliance Standards
• E.  Build Your Rule (Run tab)

A DevOps lead reviewed some system logs and notices some odd behavior that could be a data exfiltration attempt. The DevOps lead only has access to vulnerability data in Prisma Cloud Compute, so the DevOps lead passes this information to SecOps.
Which pages in Prisma Cloud Compute can the SecOps lead use to investigate the runtime aspects of this attack?

• A.  The SecOps lead should use the Incident Explorer page and Monitor > Events > Container Audits.
• B.  The SecOps lead should investigate the attack using Vulnerability Explorer and Runtime Radar.
• C.  The SecOps lead should use Incident Explorer and Compliance Explorer.
• D.  The SecOps lead should review the vulnerability scans in the CI/CD process to determine blame.