Free Practice Palo Alto Networks PCCSE Exam Questions 2025

Stay ahead with 100% Free Prisma Certified Cloud Security Engineer PCCSE Dumps Practice Questions

Page: 1 / 50

Total 250 Questions | Updated On: Apr 08, 2025

Add To Cart

Question 1

Creation of a new custom compliance standard that is based on other individual custom compliance standards needs to be automated.

Assuming the necessary data from other standards has been collected, which API order should be used for this new compliance standard?

A : 1) https://api.prismacloud.io/compliance/add2) https://api.prismacloud.io/compliance/requirementld/section3) https://api.prismacloud.io/compliance/complianceld/requirement

B : 1) https://api.prismacloud.io/compliance2) https://api.prismacloud.io/compliance/complianceld/requirement3) https://api.prismacloud.io/compliance/requirementld/section

C : 1) https://api.prismacloud.io/compliance/add2) https://api.prismacloud.io/compliance/complianceld/requirement3) https://api.prismacloud.io/compliance/requirementld/section

D : 1) https://api.prismacloud.io/compliance2) https://api.prismacloud.io/compliance/requirementld/section3) https://api.prismacloud.io/compliance/complianceld/requirement

Answer: C

Question 2

Which three OWASP protections are part of Prisma Cloud Web-Application and API Security (WAAS) rule? (Choose three.)

A : DoS Protection

B : Local file inclusion

C : SQL injection

D : Suspicious binary

E : Shellshock

Answer: A,C,D

Question 3

Which two options may be used to upgrade the Defenders with a Console v20.04 and Kubernetes deployment? (Choose two.)

A : Run the provided curl | bash script from Console to remove Defenders, and then use Cloud Discovery to automatically redeploy Defenders.

B : Remove Defenders DaemonSet, and then use Cloud Discovery to automatically redeploy the Defenders.

C : Remove Defenders, and then deploy the new DaemonSet so Defenders do not have to automatically update on each deployment.

D : Let Defenders automatically upgrade.

Answer: A,B

Question 4

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

A : config from network where api.name = ‘aws-iam-get-credential-report’ AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"

B : config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

C : config from cloud.resource where api.name = 'aws-iam-get-credential-report’ AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"

D : config where api.name = ‘aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals “true”

Answer: D

Question 5

Which two filters are available in the SecOps dashboard? (Choose two.)

A : Time range

B : Account Groups

C : Service Name

D : Cloud Region

Answer: A,B

Page: 1 / 50

Total 250 Questions | Updated On: Apr 08, 2025

Add To Cart