Paloalto Networks CloudSec-Pro 問題練習

Question No : 1
A customer with a large cloud environment needs to perform a vulnerability assessment. In this case, the customer does not have the authorization to install agents but is an owner of the cloud environments.
Which capability meets the customer’s requirements?

• A.Cortex Agent for Cloud
• B.Agentless discovery engine
• C.Cortex VM Broker
• D.Agentless disk scanning

答えを確認する

正解:

Question No : 2
A company operationalizing Cortex Cloud Data Security Posture Management (DSPM) experiences issues related to a lack of secure controls on its Amazon S3 buckets. An administrator wants to use the XQL editor to investigate S3 buckets but is unable to see any data in the Cortex Cloud console.
How can the administrator ensure that data is being ingested?

• A.Install the DSPM module into the cloud environment.
• B.Install the Cortex XDR agent for cloud on the S3 buckets.
• C.Verify that S3 is added as a data source.
• D.Verify that the data source is properly onboarded.

答えを確認する

正解:

Question No : 3
What allows Cortex Cloud to provide vulnerability visibility by default upon onboarding cloud service provider (CSP) accounts?

• A.Agentless disk scanner
• B.Cortex CLI scan
• C.Third-party ingestion
• D.XDR Cloud agent

答えを確認する

正解:

Question No : 4
A company has a costly ransomware incident on its Azure infrastructure after an employee was phished while using an unpatched personal computer to download company bank statements.
Which two Cloud Security Management modules are most capable of mitigating such incidents and helping the company improve its security posture? (Choose two.)

• A.Vulnerability security
• B.Data security
• C.Application security
• D.Identity security

答えを確認する

正解:

Question No : 5
Which feature of Cloud Security Posture Management (CSPM) helps detect and prioritize critical risks in cloud environments?

• A.Attack path analysis
• B.Vulnerability scanning
• C.Compliance checklist
• D.Risk assessment

答えを確認する

正解:

Question No : 6
Which Cortex Cloud report is most appropriate for a cybersecurity director to receive critical and high compliance risks for AWS?

• A.Cloud Risk
• B.Asset Inventory
• C.Cloud Security Assessment
• D.Intelligence Assessment

答えを確認する

正解:

Question No : 7
A developer writes a serverless application to extract a field from a file in an S3 bucket. The Lambda function is assigned the S3FullAccess managed policy.
Refer to the scenario to answer this question:



Which two actions will allow a Cortex Cloud user to view the effective permissions of the Lambda function? (Choose two.)

• A.Opening the Identity dashboard, filtering for serverless functions, opening the function and clicking on “Access”
• B.Viewing all Compute assets and applying the Serverless = Yes filter in the inventory
• C.Viewing the Access tab in the non-human identities inventory
• D.Selecting the Access tab in the serverless function inventory after selecting the function

答えを確認する

正解:

Question No : 8
Which Cortex Cloud capability will increase efficiency when prioritizing and categorizing issues?

• A.SmartScore
• B.Manual tagging
• C.SmartGrouping
• D.Static threshold

答えを確認する

正解:

Question No : 9
Which operational status will identify all endpoints with agents that are not functioning properly due to insufficient resources?

• A.Unprotected
• B.Not Protected
• C.Limited Protection
• D.Local Resource Impact

答えを確認する

正解:

Question No : 10
A threat intelligence team determines that IP addresses associated with brute force attacks on the VPN gateways are historically linked to a ransomware campaign.
Which two features can be defined in Cortex to trigger alerts on the malicious objects and on specified system processes linked to the tactics, techniques, and procedures (TTPs) of the threat actors? (Choose two.)

• A.External dynamic list
• B.Security event anomaly
• C.Behavioral indicator of compromise (BIOC)
• D.Indicator of compromise (IOC)

答えを確認する

正解:

Question No : 11
How can an administrator use Endpoint Administrative Cleanup to ensure that all duplicates have been removed from the All Endpoints table in Cortex Cloud and that the table includes the most accurate list of endpoints?

• A.Reinstall the agents on all endpoints.
• B.Enable periodic duplicate cleanup and define criteria.
• C.Define criteria and remove any duplicate endpoint agents.
• D.Copy and then delete all duplicate entries from the table.

答えを確認する

正解:

Question No : 12
When is it advantageous to deploy a Cortex XDR agent with advanced endpoint protection for a Windows host to detect a malicious occurrence?

• A.When analyzing memory usage on the host
• B.When simultaneously collecting information on hosts
• C.When proactively collecting forensic data to analyze an event
• D.When gathering a holistic view of running processes

答えを確認する

正解:

Question No : 13
A security engineer needs to transfer dashboard configurations between the company’s Cortex Cloud environments for Asia, Europe, and North America divisions to streamline onboarding.
Which condition would prevent this action?

• A.Dashboards are based on custom infrastructure.
• B.Dashboards are in JSON format.
• C.Predefined dashboards cannot be exported.
• D.Dashboards include XQL widgets.

答えを確認する

正解:

Question No : 14
Which step is required to create a user role?

• A.Enter a description for the group.
• B.Modify the role name.
• C.Navigate to access management.
• D.Create a data set.

答えを確認する

正解:

Question No : 15
How can a company use Cortex XSIAM to automate security operations and enhance threat detection?

• A.Automatically implement firewall rules based on detected vulnerabilities.
• B.Decrease the number of analysts needed to review an organization security posture.
• C.Configure playbooks to automate response actions for detected threats.
• D.Review all security logs on a daily basis and automatically create cases.

答えを確認する

正解: