Palo Alto Networks PCCSE 問題集

質問 1：
How are the following categorized?
Backdoor account access Hijacked processes Lateral movement
Port scanning
A. incidents
B. models
C. admission controllers
D. audits
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which RQL query will help create a custom identity and access management (1AM) policy to alert on Lambda functions that have permission to terminate EC2 instances?
A. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name =
'ec2:TerminateInstances'
B. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'ec2' AND source.cloud.resource.type = 'instance' AND dest.cloud.service.name = 'lambda' AND action.name =
'ec2:TerminateInstances'
C. iam from cloud.resource where cloud.type equals 'AWS' AND cloud.resource.type equals 'lambda function' AND cloud.service.name = 'ec2' AND action.name equals 'ec2:TerminateInstances'
D. iam from cloud.resource where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name =
'ec2:TerminateInstances'
正解：A

質問 3：
A security team has a requirement to ensure the environment is scanned for vulnerabilities. What are three options for configuring vulnerability policies? (Choose three.)
A. apply policy only when vendor fix is available
B. output verbosity for blocked requests
C. individual grace periods for each severity level
D. customize message on blocked requests
E. individual actions based on package type
正解：A,C,E
解説: (Topexam メンバーにのみ表示されます)

質問 4：
The attempted bytes count displays?
A. traffic that is either denied by the firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
B. traffic that is either denied by the security group or firewall rules.
C. traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
D. traffic denied by the security group or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Put the steps of integrating Okta with Prisma Cloud in the right order in relation to CIEM or SSO okra integration.

正解：

Explanation:
* Log in to your Okta administrator panel.
* Add an administrator role.
* Generate an API token.
* Configure Okta with Prisma Cloud.
* Run the IAM queries for Okta.
When integrating Okta with Prisma Cloud, especially in the context of Cloud Infrastructure Entitlement Management (CIEM) or Single Sign-On (SSO) integration, the process must be conducted in a sequence that establishes the necessary permissions and configurations for successful integration.
The first step is to log in to the Okta administrator panel. This is where you will manage your Okta settings and begin the integration process.
Once logged in, the next step is to add an administrator role. This involves assigning a role within Okta that has the appropriate permissions to create and manage API tokens and to perform integration tasks.
After setting up the correct administrative role, the third step is to generate an API token. This token will be used to authenticate the communications between Okta and Prisma Cloud. The API token acts as a secure method of verifying that requests made to Prisma Cloud are authorized.
With the API token generated, the fourth step is to configure Okta with Prisma Cloud. This step typically involves entering the API token into Prisma Cloud and setting up the necessary configurations within Prisma Cloud to recognize and accept authentication requests from Okta.
The final step is to run the Identity and Access Management (IAM) queries for Okta within Prisma Cloud.
This step is crucial for CIEM, as it allows Prisma Cloud to query Okta for identity information, user roles, and entitlements, ensuring that the correct permissions are enforced across the cloud environment and that SSO is functioning correctly.
Following these steps in order will ensure that Okta is properly integrated with Prisma Cloud, providing a secure and efficient method for managing cloud access and entitlements.

質問 6：
Which component of a Kubernetes setup can approve, modify, or reject administrative requests?
A. Kube Controller
B. Terraform Controller
C. Control plane
D. Admission Controller
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
What is the function of the external ID when onboarding a new Amazon Web Services (AWS) account in Prisma Cloud?
A. It is the default name of the PrismaCloudApp stack.
B. It is a unique identifier needed only when Monitor & Protect mode is selected.
C. It is the resource name for the Prisma Cloud Role.
D. It is a UUID that establishes a trust relationship between the Prisma Cloud account and the AWS account in order to extract data.
正解：D
解説: (Topexam メンバーにのみ表示されます)