PCCSE Practice Test

PCCSE Practice Test practice questions, page 5 of 10, with answer review and explanations.

Question 21

The security team wants to protect a web application container from an SQLi attack. Which type of policy should the administrator create to protect the container?

  1. CNAF
  2. Runtime
  3. Compliance
  4. CNNF

Question 22

An S3 bucket within AWS has generated an alert by violating the Prisma Cloud Default policy `AWS S3 buckets are accessible to public`. The policy definition follows: config where cloud.type = 'aws' AND api.name='aws-s3api-get-bucket-acl' AND json.rule="((((acl.grants[?(@.grantee=='AllUsers')] size > 0) or policyStatus.isPublic is true) and publicAccessBlockConfiguration does not exist) or ((acl.grants[?(@.grantee=='AllUsers')] size > 0) and publicAccessBlockConfiguration.ignorePublicAcis is false) or (policyStatus.isPublic is true and publicAccessBlockConfiguration.restrictPublicBuckets is false)) and websiteConfiguration does not exist" Why did this alert get generated?

  1. an event within the cloud account
  2. network traffic to the S3 bucket
  3. configuration of the S3 bucket
  4. anomalous behaviors

Question 23

Which order of steps map a policy to a custom compliance standard? (Drag the steps into the correct order of occurrence, from the first step to the last.) Select and Place:

Question 24

A customer is interested in PCI requirements and needs to ensure that no privilege containers can start in the environment. Which action needs to be set for `do not use privileged containers`?

  1. Prevent
  2. Alert
  3. Block
  4. Fail

Question 25

Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?

  1. The console cannot natively run in an ECS cluster. A onebox deployment should be used.
  2. Download and extract the release tarball Ensure that each node has its own storage for Console data Create the Console task definition Deploy the task definition
  3. Download and extract release tarball Download task from AWS Create the Console task definition Deploy the task definition
  4. Download and extract the release tarball Create an EFS file system and mount to each node in the cluster Create the Console task definition Deploy the task definition