stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
PANW PCCSE Quiz 2 Flashcards | StudBud
Explore
/
PANW PCCSE Quiz 2
PANW PCCSE Quiz 2
25 terms
·
StudBud Administration
·
1 play
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Which image vulnerability policy field is not available in Host Vulnerability policies?
Apply rule only when vendor fixes are available
Exceptions
Block threshold
Alert threshold
2
Which two template types are supported by build rules?
XML
CloudFormation
Terraform
Bash scripts with configuration commands
3
Which HTTP method do you use with an event search?
HEAD
PUT
GET
POST
4
An alarm resulted from device A connecting to device B. Which device should you investigate first?
Device A
The device that contains more valuable information
The network firewalls
Device B
5
Which type of query do you use to validate that a build policy is being followed?
RQL
JavaScript code to calculate the answer
SQL query
JSON query
6
If a Docker container raises a medium-severity compliance concern what is the first digit of the compliance ID?
3
2
4
5
7
Which is not a field in the alert notification?
policyLabels
accountName
riskLevel
alertRemediationCli
8
Which 2 criteria can be used to filter the asset inventory?
CIDR Network Block
Resource Name
Standard
Resource Type
9
Which two integrations can send alerts to a system that is behind dynamic source-address translation?
Webhooks
Tenable
Email
Qualys
10
What are 3 ways to limit the applicability of a vulnerability rule?
exceptions to the rule by CVEs or tags
operating system (Linux vs. Windows)
apply the rule only if there is a vendor fix
scope (containers images etc.)
11
What is a valid anomaly type?
excessive login failures
impossible time travel (account hijacking)
too many login attempts
new device
12
Which format do you use with a config search?
XML query
JSON query
RQL
SQL
13
Which vulnerability rule policy
does not
make sense?
Alert threshold Medium, Block threshold: Low
Alert threshold Low, Block threshold: Medium
Alert threshold Low, Block threshold: Medium
Alert threshold Low, Block threshold: High
14
In a Prisma Cloud asset inventory which is not an option for the Assets by Classification widget?
Cloud Type AWK Alibaba Cloud GCP Azure
Asset Type (Instance Network Database etc.)
Account Name
Region
15
In which format are alert details provided to accepting systems?
HTTP
CSV
XML
JSON
16
Which request type do webhooks use?
GET
POST
ALERT
PUT
17
If a Docker image raises a high-severity compliance concern, what is the first digit of the compliance ID?
4
5
3
2
18
Which is not a valid action for a Docker compliance rule?
Alert
Block
Remediate
Ignore
19
Which 3 criteria can be used to restrict the scope of a container and image-compliance rule?
Container name
Cloud type (AWS Azure and or GCP)
Label
Image name
20
Which 2 criteria can you use for exceptions in a Host Vulnerability policy?
OS version
Severity
Tag
CVE ID Console
21
Which entity creates the host compliance policies that Prisma Cloud checks?
Palo Alto Networks research department
Committee for Information Safety
Center for Internet Security
National Institute of Standards and Technology
22
You type this query: event where user = 'root'. Where would the events you see originate?
AWS
Azure
Google Cloud
GCP
23
Which is not a compliance template that can be used for a Container Compliance policy?
ISO 27001
GDPR
PCI
HIPAA
24
Which is a valid anomaly type for a device?
MAC Address
Retinal Scan
Fingerprint
IP Address
25
Which of these is not a tab in the registry details for a Docker image?
Packages
Process Info
Layers
Network Connections
