Question 1

You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestionis visible in the Asset Inventory for the onboarded account, but no alerts are being generated for theconfiguration assets in the account.Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existingalert rules. ROL statements on the investigate matching those policies return config resource resultssuccessfully.Why are no alerts being generated?

Options :

A : The public cloud account is not associated with an alert notification.

B : The public cloud account does not have audit trail ingestion enabled.

C : The public cloud account does not access to configuration resources.

D : The public cloud account is not associated with an alert rule.

Answer: D

Question 2

Which statement applies to Adoption Advisor?

Options :

A : It helps adopt security capabilities at a fixed pace regardless of the organization's needs.

B : It only provides guidance during the deploy phase of the application lifecycle.

C : It is only available for organizations that have completed the cloud adoption journey.

D : It includes security capabilities from subscriptions for CSPM, CWP, CCS, OEM, and Data Security.

Answer: D

Question 3

The security team wants to target a CNAF policy for specific running Containers. How should theadministrator scope the policy to target the Containers?

Options :

A : scope the policy to Image names.

B : scope the policy to namespaces.

C : scope the policy to Defender names.

D : scope the policy to Host names.

Answer: A

Question 4

Given the following RQL:event from cloud.audit_logs where operation IN (‘CreateCryptoKey’, ‘DestroyCryptoKeyVersion’, ‘v1.compute.disks.createSnapshot’)Which audit event snippet is identified?

Options :

A :

B :

C :

Answer: C

Question 5

A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can beperformed by the Terraform script? (Choose two.)

Options :

A : enable flow logs for Prisma Cloud.

B : create the Prisma Cloud role.

C : enable the required APIs for Prisma Cloud.

D : publish the flow log to a storage bucket.

Answer: B,C

Confidently Practice Online with Free CloudSec-Pro Exam Cram

Buying Options: