Palo Alto Networks CloudSec Pro.pdf
Q: 1
Which two of the following are required to be entered on the IdP side when setting up SSO in Prisma
Cloud? (Choose two.)
Options
Q: 2
Which two statements are true about the differences between build and run config policies? (Choose
two.)
Options
Q: 3
A Prisma Cloud administrator is tasked with pulling a report via API. The Prisma Cloud tenant is
located on app2.prismacloud.io.
What is the correct API endpoint?
Options
Q: 4
Given a default deployment of Console, a customer needs to identify the alerted compliance checks
that are set by default.
Where should the customer navigate in Console?
Options
Q: 5
A customer finds that an open alert from the previous day has been resolved. No auto-remediation
was configured.
Which two reasons explain this change in alert status? (Choose two.)
Options
Q: 6
What factor is not used in calculating the net effective permissions for a resource in AWS?
Options
Q: 7
You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource
ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being
generated for the configuration assets in the account.
Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to
existing alert rules. ROL statements on the investigate matching those policies return config resource
results successfully.
Why are no alerts being generated?
Options
Q: 8
The Compute Console has recently been upgraded, and the administrator plans to delay upgrading
the Defenders and the Twistcli tool until some of the team’s resources have been rescaled. The
Console is currently one major release ahead.
What will happen as a result of the Console upgrade?
Options
Q: 9
What is the behavior of Defenders when the Console is unreachable during upgrades?
Options
Q: 10
You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is
necessary to complete this policy?
Options
Question 1 of 10
