PCCSE Exam Questions and Answers | Exam-Dumps (Page: 3)

QUESTION: 11

A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.

Which two reasons explain this change in alert status? (Choose two.)

user manually changed the alert status.
policy was changed.
resource was deleted.
alert was sent to an external integration.

Answer(s): A,C

Explanation:

When an open alert from the previous day has been resolved without any configured auto- remediation, the change in alert status could be due to A. a user manually changing the alert status, indicating a manual intervention where someone reviewed and updated the alert status, and C. resource was deleted, implying that the resolution of the alert could be due to the removal of the resource associated with the alert, hence nullifying the alert condition.

Reference:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage- prisma-cloud- alerts/prisma-cloud-alert-resolution-reasons.html

Reveal Solution Next Question

QUESTION: 12

Which three steps are involved in onboarding an account for Data Security? (Choose three.)

Create a read-only role with in-line policies
Create a Cloudtrail with SNS Topic
Enable Flow Logs
Enter the RoleARN and SNSARN
Create a S3 bucket

Answer(s): B,D,E

Explanation:

Onboarding an account for Data Security involves several critical steps to ensure comprehensive coverage and effective monitoring. The steps involved include B. Create a Cloudtrail with SNS Topic to track and manage API calls and relevant notifications, D. Enter the RoleARN and SNSARN to provide necessary access and integration points for data security functions, and E. Create a S3 bucket which serves as a storage solution for logging and data capture essential for security analysis.

Reveal Solution Next Question

QUESTION: 13

An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same ports as the default Prisma Compute Console configuration.

In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS.
Which port will twistcli need to use to access the Prisma Compute APIs?

8084
443
8083
8081

Answer(s): A

Explanation:

When the administrator wants twistcli to communicate with the Console over HTTPS in a Kubernetes cluster, and considering the load balancer is configured in TCP passthrough mode, A. 8084 is typically the port used for secure HTTPS communication with the Prisma Compute Console. This port will allow twistcli to access the Prisma Compute APIs securely.

https://docs.prismacloudcompute.com/docs/compute_edition_21_04/tools/twistcli.html#connectivi ty-to-console

Reveal Solution Next Question

QUESTION: 14

A customer is reviewing Container audits, and an audit has identified a cryptominer attack.
Which three options could have generated this audit? (Choose three.)

The value of the mined currency exceeds $100.
High CPU usage over time for the container is detected.
Common cryptominer process name was found.
The mined currency is associated with a user token.
Common cryptominer port usage was found.

Answer(s): B,C,E

Explanation:

In the case of identifying a cryptominer attack through container audits, the options that could have generated this audit include B. High CPU usage over time for the container is detected, which is a common indicator of cryptomining activity as it consumes significant computational resources, C. Common cryptominer process name was found, which directly indicates the presence of cryptomining based on known malicious processes, and E. Common cryptominer port usage was found, suggesting cryptomining activity based on network behavior typical of such attacks.

Reveal Solution Next Question

QUESTION: 15

Which step is included when configuring Kubernetes to use Prisma Cloud Compute as an admission controller?

copy the Console address and set the config map for the default namespace.
create a new namespace in Kubernetes called admission-controller.
enable Kubernetes auditing from the Defend > Access > Kubernetes page in the Console.
copy the admission controller configuration from the Console and apply it to Kubernetes.

Answer(s): D

Explanation:

When configuring Kubernetes to use Prisma Cloud Compute as an admission controller, a crucial step involves D. copy the admission controller configuration from the Console and apply it to Kubernetes. This step is essential for integrating Prisma Cloud Compute's security controls directly into the Kubernetes admission process, enabling real-time security assessments and policy enforcement for new or modified resources within the cluster.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/20-04/prisma-cloud-compute-edition- admin/access_control/open_policy_agent.html step 2

Reveal Solution Next Question

Palo Alto Networks PCCSE Exam (page: 3) Palo Alto Networks Prisma Certified Cloud Security Engineer Updated on: 25-Dec-2025

QUESTION: 11

Explanation:

Reference:

QUESTION: 12

Explanation:

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

Palo Alto Networks PCCSE Exam (page: 3)
Palo Alto Networks Prisma Certified Cloud Security Engineer
Updated on: 25-Dec-2025