Free PCCSE Exam Dumps

Question 11

Which port should a security team use to pull data from Console’s API?

A. 53
B. 25
C. 8084
D. 8083

Correct Answer:D

Question 12

Which statement is true regarding CloudFormation templates?

A. Scan support does not currently exist for nested references, macros, or intrinsic functions.
B. A single template or a zip archive of template files cannot be scanned with a single API request.
C. Request-Header-Field ‘cloudformation-version’ is required to request a scan.
D. Scan support is provided for JSON, HTML and YAML formats.

Correct Answer:A

Question 13

A customer wants to turn on Auto Remediation.
Which policy type has the built-in CLI command for remediation?

A. Anomaly
B. Audit Event
C. Network
D. Config

Correct Answer:D

Question 14

You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account.
Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully.
Why are no alerts being generated?

A. The public cloud account is not associated with an alert notification.
B. The public cloud account does not have audit trail ingestion enabled.
C. The public cloud account does not access to configuration resources.
D. The public cloud account is not associated with an alert rule.

Correct Answer:A

Question 15

A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.
Which port should the team specify in the CNAF rule to protect the application?

A. 443
B. 80
C. 8080
D. 8888

Correct Answer:C