PCCSE Practice Test

PCCSE Practice Test practice questions, page 6 of 10, with answer review and explanations.

Question 26

Which options show the steps required to upgrade Console when using projects?

  1. Upgrade all Supervisor Consoles Upgrade Central Console
  2. Upgrade Central Console Upgrade Central Console Defenders
  3. Upgrade Defender Upgrade Central Console Upgrade Supervisor Consoles
  4. Upgrade Central Console Upgrade all Supervisor Consoles

Question 27

A customer has Prisma Cloud Enterprise and host Defenders deployed. What are two options that allow an administrator to upgrade Defenders? (Choose two.)

  1. with auto-upgrade, the host Defender will auto-upgrade.
  2. auto deploy the Lambda Defender.
  3. click the update button in the web-interface.
  4. generate a new DaemonSet file.

Question 28

Which intensity setting for anomaly alerts is used for the measurement of 100 events over 30 days?

  1. High
  2. Medium
  3. Low
  4. Very High

Question 29

Given this information: ✑ The Console is located at https://prisma-console.mydomain.local ✑ The username is: cluster ✑ The password is: password123 ✑ The image to scan is: myimage:latest Which twistcli command should be used to scan a Container for vulnerabilities and display the details about each vulnerability?

  1. twistcli images scan --console-address https://prisma-console.mydomain.local -u cluster -p password123 --details myimage:latest
  2. twistcli images scan --console-address prisma-console.mydomain.local -u cluster -p password123 --vulnerability-details myimage:latest
  3. twistcli images scan --address prisma-console.mydomain.local -u cluster -p password123 --vulnerability-details myimage:latest
  4. twistcli images scan --address https://prisma-console.mydomain.local -u cluster -p password123 --details myimage:latest

Question 30

The development team wants to block Cross Site Scripting attacks from pods in its environment. How should the team construct the CNAF policy to protect against this attack?

  1. create a Host CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to ג€preventג€.
  2. create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to alert.
  3. create a Container CNAF policy, targeted at a specific resource, check the box for XSS protection, and set the action to prevent.
  4. create a Container CNAF policy, targeted at a specific resource, and they should set ג€Explicitly allowed inbound IP sourcesג€ to the IP address of the pod.