Question 1

Which two information types cannot be seen in the data security dashboard? (Choose two.)

Options :

A : Top Publicly Exposed Objects By Data Profile

B : Bucket owner

C : Object content

D : Total objects

E : Object Data Profile by Region

Answer: B,C

Question 2

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

Options :

A : config from network where api.name = ‘aws-iam-get-credential-report’ AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"

B : config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

C : config from cloud.resource where api.name = 'aws-iam-get-credential-report’ AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"

D : config where api.name = ‘aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals “true”

Answer: D

Question 3

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.

Which type of policy should be created to protect this pod from Layer7 attacks?

Options :

A : The development team should create a WAAS rule for the host where these pods will be running.

B : The development team should create a WAAS rule targeted at all resources on the host.

C : The development team should create a runtime policy with networking protections.

D : The development team should create a WAAS rule targeted at the image name of the pods.

Answer: B

Question 4

Review this admission control policy:

match[{'msg': msg}] { input.request.operation == 'CREATE' input.request.kind.kind == 'Pod' input.request.resource.resource == 'pods'

input.request.object.spec.containers[_].securityContext.privileged msg := 'Privileged'

}

Which response to this policy will be achieved when the effect is set to ''block''?

Options :

A : The policy will block all pods on a Privileged host.

B : The policy will replace Defender with a privileged Defender.

C : The policy will alert only the administrator when a privileged pod is created.

D : The policy will block the creation of a privileged pod.

Answer: C

Question 5

During the Learning phase of the Container Runtime Model, Prisma Cloud enters a “dry run” period for how many hours?

Options :

A : 4

B : 48

C : 1

D : 24

Answer: D

Higher Test Marks with Free Online PCCSE Exam Practice

Buying Options: