Question No 1

Given a default deployment of Console, a customer needs to identify the alerted compliance checks that are set by default. Where should the customer navigate in Console?

Choose the Choices:

Question No 2

Which container scan is constructed correctly?

Choose the Choices:

twistcli images scan - u api - p api - - address https//us - west1.cloud.twistlock.com/us - 3 - 123456789 - - container myimage/latest

twistcli images scan - - docker - address https//us - west1.cloud.twistlock.com/us - 3 - 123456789 myimage/ latest

twistcli images scan - u api - p api - - address https//us - west1.cloud.twistlock.com/us - 3 - 123456789 - - details myimage/latest

twistcli images scan - u api - p api - - docker - address https//us - west1.cloud.twistlock.com/us - 3 - 123456789 myimage/latest

Question No 3

The development team wants to fail CI jobs where a specific CVE is contained within the image. How should the development team configure the pipeline or policy to produce this outcome?

Choose the Choices:

Set the specific CVE exception as an option in Jenkins or twistcli.

Set the specific CVE exception as an option in Defender running the scan.

Set the specific CVE exception as an option using the magic string in the Console.

Set the specific CVE exception in Console’s CI policy.

Question No 4

Which three types of classifications are available in the Data Security module? (Choose three.)

Choose the Choices:

Personally identifiable information

Malicious IP

Compliance standard

Financial information

Malware

Question No 5

A customer has a requirement to terminate any Container from image topSecretlatest when a process named ransomWare is executed. How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

Choose the Choices:

set the Container model to manual relearn and set the default runtime rule to block for process protection.

set the Container model to relearn and set the default runtime rule to prevent for process protection.

add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list, and set the action to “prevent”.

choose “copy into rule” for the Container, add a ransomWare process into the denied process list, and set the action to “block”.

Practice Palo Alto Networks CloudSec-Pro Exam Questions

Question No 1

Question No 2

Question No 3

Question No 4

Question No 5

CloudSec-Pro Exam Features

CloudSec-Pro PDF Dumps