PCCSE Practice Test

Question 36

A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)

1. individual actions based on package type
2. output verbosity for blocked requests
3. apply policy only when vendor fix is available
4. individual grace periods for each severity level
5. customize message on blocked requests

Question 37

The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely. Which strategy should the administrator use to achieve this goal?

1. Disable the policy
2. Set the Alert Disposition to Conservative
3. Change the Training Threshold to Low
4. Set Alert Disposition to Aggressive

Question 38

What is the behavior of Defenders when the Console is unreachable during upgrades?

1. Defenders continue to alert, but not enforce, using the policies and settings most recently cached before upgrading the Console.
2. Defenders will fail closed until the web-socket can be re-established.
3. Defenders will fail open until the web-socket can be re-established.
4. Defenders continue to alert and enforce using the policies and settings most recently cached before upgrading the Console.

Question 39

How are the following categorized? ✑ Backdoor account access ✑ Hijacked processes ✑ Lateral movement ✑ Port scanning

1. audits
2. incidents
3. admission controllers
4. models

Question 40

An administrator needs to write a script that automatically deactivates access keys that have not been used for 30 days. In which order should the API calls be used to accomplish this task? (Drag the steps into the correct order from the first step to the last.) Select and Place: