Free Practice Palo Alto Networks PCCSE Exam Questions 2025

Stay ahead with 100% Free Prisma Certified Cloud Security Engineer PCCSE Dumps Practice Questions

Page: 1 / 50

Total 250 Questions | Updated On: Apr 22, 2025

Add To Cart

Question 1

Which three OWASP protections are part of Prisma Cloud Web-Application and API Security (WAAS) rule? (Choose three.)

A : DoS Protection

B : Local file inclusion

C : SQL injection

D : Suspicious binary

E : Shellshock

Answer: A,C,D

Question 2

Which two actions are required in order to use the automated method within Amazon Web Services (AWS) Cloud to streamline the process of using remediation in the identity and access management (IAM) module? (Choose two.)

A : Install boto3 & requests library.

B : Configure IAM Azure remediation script.

C : Integrate with Azure Service Bus.

D : Configure IAM AWS remediation script.

Answer: A,D

Question 3

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

A : config from network where api.name = ‘aws-iam-get-credential-report’ AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals "true"

B : config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals "true"

C : config from cloud.resource where api.name = 'aws-iam-get-credential-report’ AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals "*"

D : config where api.name = ‘aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals “true”

Answer: D

Question 4

You are an existing customer of Prisma Cloud Enterprise. You want to onboard a public cloud account and immediately see all of the alerts associated with this account based off ALL of your tenant's existing enabled policies. There is no requirement to send alerts from this account to a downstream application at this time.

Which option shows the steps required during the alert rule creation process to achieve this objective?

A : Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert ruleSelect ''select all policies'' checkbox as part of the alert rule Confirm the alert rule

B : Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert ruleSelect one or more policies checkbox as part of the alert rule Confirm the alert rule

C : Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert ruleSelect one or more policies as part of the alert rule Add alert notificationsConfirm the alert rule

D : Ensure the public cloud account is assigned to an account group Assign the confirmed account group to alert ruleSelect ''select all policies'' checkbox as part of the alert rule Add alert notificationsConfirm the alert rule

Answer: C

Question 5

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.

Which type of policy should be created to protect this pod from Layer7 attacks?

A : The development team should create a WAAS rule for the host where these pods will be running.

B : The development team should create a WAAS rule targeted at all resources on the host.

C : The development team should create a runtime policy with networking protections.

D : The development team should create a WAAS rule targeted at the image name of the pods.

Answer: B

Page: 1 / 50

Total 250 Questions | Updated On: Apr 22, 2025

Add To Cart