PCCSE Practice Test

PCCSE Practice Test practice questions, page 4 of 10, with answer review and explanations.

Question 16

A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can be performed by the Terraform script? (Choose two.)

  1. enable flow logs for Prisma Cloud.
  2. create the Prisma Cloud role.
  3. enable the required APIs for Prisma Cloud.
  4. publish the flow log to a storage bucket.

Question 17

Which statement about build and run policies is true?

  1. Build policies enable you to check for security misconfigurations in the IaC templates.
  2. Every type of policy has auto-remediation enabled by default.
  3. The four main types of policies are: Audit Events, Build, Network, and Run.
  4. Run policies monitor network activities in the environment and check for potential issues during runtime.

Question 18

An administrator sees that a runtime audit has been generated for a host. The audit message is: `Service postfix attempted to obtain capability SHELL by executing /bin/sh /usr/libexec/postfix/postfix-script.stop. Low severity audit, event is automatically added to the runtime model` Which runtime host policy rule is the root cause for this runtime audit?

  1. Custom rule with specific configuration for file integrity
  2. Custom rule with specific configuration for networking
  3. Default rule that alerts on capabilities
  4. Default rule that alerts on suspicious runtime behavior

Question 19

Which option identifies the Prisma Cloud Compute Edition?

  1. Package installed with APT
  2. Downloadable, self-hosted software
  3. Software-as-a-Service (SaaS)
  4. Plugin to Prisma Cloud

Question 20

Which type of compliance check is available for rules under Defend > Compliance > Containers and Images > CI?

  1. Host
  2. Container
  3. Functions
  4. Image