During an initial deployment of Prisma Cloud Compute, the customer sees vulnerabilities in their environment.
Which statement correctly describes the default vulnerability policy?

• A.It blocks containers after 30 days if they contain a critical vulnerability.
• B.It blocks all containers that contain a vulnerability.
• C.It alerts on any container with more than three critical vulnerabilities.
• D.It alerts on all vulnerabilities, regardless of severity.

Comment: *

Name: *

Email: *

Verification: *

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.
Which type of policy should be created to protect this pod from Layer7 attacks?

• A.The development team should create a WAAS rule for the host where these pods will be running.
• B.The development team should create a WAAS rule targeted at all resources on the host.
• C.The development team should create a runtime policy with networking protections.
• D.The development team should create a WAAS rule targeted at the image name of the pods.

Comment: *

Name: *

Email: *

Verification: *

A customer has a development environment with 50 connected Defenders. A maintenance window is set for Monday to upgrade 30 stand-alone Defenders in the development environment, but there is no maintenance window available until Sunday to upgrade the remaining 20 stand-alone Defenders.
Which recommended action manages this situation?

• A.Go to Manage > Defender > Manage, then click Defenders, and use the Scheduler to choose which Defenders will be automatically upgraded during the maintenance window.
• B.Find a maintenance window that is suitable to upgrade all stand-alone Defenders in the development environment.
• C.Upgrade a subset of the Defenders by clicking the individual Actions > Upgrade button in the row that corresponds to the Defender that should be upgraded during the maintenance window.
• D.Open a support case with Palo Alto Networks to arrange an automatic upgrade.

Comment: *

Name: *

Email: *

Verification: *

Which field is required during the creation of a custom config query?

• A.resource status
• B.api.name
• C.finding.type
• D.cloud.type

Comment: *

Name: *

Email: *

Verification: *

Which three actions are available for the container image scanning compliance rule? (Choose three.)

• A.Allow
• B.Snooze
• C.Block
• D.Ignore
• E.Alert

Comment: *

Name: *

Email: *

Verification: *