QUESTION 28
Which three types of classifications are available in the Data Security module? (Choose three. )

QUESTION 29
A customer is deploying Defenders to a Fargate environment It wants to understand the vulnerabilities in the images it is deploying. How should the customer automate vulnerability scanning for images deployed to Fargate?

QUESTION 30
An administrator has added a Cloud account on Prisma Cloud and then deleted it.
What will happen if the deleted account is added back on Prisma Cloud within a 24-hour period?

QUESTION 31
Which component(s), if any, will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?

QUESTION 32
Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default Where should the customer navigate in Console?

QUESTION 33
Which type of compliance check is available for rules under Defend > Compliance > Containers and Images > CI?

QUESTION 34
Which two of the following are required to be entered on the IdP side when setting up SSO in Prisma Cloud? (Choose two.)

QUESTION 35
An administrator has a requirement to ingest all Console and Defender logs to Splunk.
Which option will satisfy this requirement in Prisma Cloud Compute?

QUESTION 36
Given an existing ECS Cluster, which option shows the steps required to install the Console in Amazon ECS?

QUESTION 37
Which two attributes of policies can be fetched using API? (Choose two.)

QUESTION 38
A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)

QUESTION 39
Which three types of classifications are available in the Data Security module? (Choose three.)

QUESTION 40
A customer does not want alerts to be generated from network traffic that originates from trusted internal networks.
Which setting should you use to meet this customer’s request?

QUESTION 41
Which container scan is constructed correctly?

QUESTION 42
A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)

QUESTION 43
Which two bot types are part of Web Application and API Security (WAAS) bot protection? (Choose two.)

QUESTION 44
What is the default namespace created by Defender DaemonSet during deployment?

QUESTION 45
Given the following RQL:
event from cloud.audit_logs where operation IN (‘CreateCryptoKey’, ‘DestroyCryptoKeyVersion’,
‘v1.compute.disks.createSnapshot’)
Which audit event snippet is identified?
A)

B)

C)

D)

QUESTION 46
Match the correct scanning mode for each given operation.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

QUESTION 47
Who can access saved searches in a cloud account?

QUESTION 48
Review this admission control policy:
match[{“msg”: msg}] { input.request.operation == “CREATE” input.request.kind.kind == “Pod” input.request.resource.resource == “pods” input.request.object.spec.containers[_].securityContext.privileged msg := “Privileged”
}
Which response to this policy will be achieved when the effect is set to “block”?

QUESTION 49
Match the correct scanning mode for each given operation.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

QUESTION 50
An administrator of Prisma Cloud wants to enable role-based access control for Docker engine.
Which configuration step is needed first to accomplish this task?

QUESTION 51
A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time.
What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)

QUESTION 52
An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise.
tenant-In which order will the APIs be executed for this service? (Drag the steps into the correct order of occurrence from the first step to the last)