A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

• A.add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list and set the action to "prevent".
• B.choose "copy into rule" for the Container add a ransomWare process into the denied process list and set the action to "block"
• C.set the Container model to manual relearn and set the default runtime rule to block for process protection.
• D.set the Container model to relearn and set the default runtime rule to prevent for process protection.

Comment: *

Name: *

Email: *

Verification: *

A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application.
The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.
Which port should the team specify in the CNAF rule to protect the application?

• A.8888
• B.80
• C.8080
• D.443

Comment: *

Name: *

Email: *

Verification: *

An administrator sees that a runtime audit has been generated for a Container The audit message is DNS resolution of suspicious name wikipedia.com. type A".
Why would this message appear as an audit?

• A.The DNS was not learned as part of the Container model or added to the DNS allow list
• B.The process calling out to this domain was not part of the Container model.
• C.The Layer7 firewall detected this as anomalous behavior
• D.This is a DNS known to be a source of malware

Comment: *

Name: *

Email: *

Verification: *

Order the steps involved in onboarding an AWS Account for use with Data Security feature.

Correct Answer:

Explanation
Table Description automatically generated with medium confidence

Comment: *

Name: *

Email: *

Verification: *

Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster.
Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?

• A.From the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.
• B.From the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.
• C.From the deployment page in Console, choose twistlock-console for Console identifier, and run the curl
  | bash script on the master Kubernetes node.
• D.From the deployment page configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.

Comment: *

Name: *

Email: *

Verification: *