Question 1

While writing a custom RQL with array objects in the investigate page, which type of auto-suggestion a user can leverage?

Options :

A : Auto-sugestion for array objects that are useful for comparing between arrays

B : Auto-suggestion is not available for array objects

C : Auto-suggestion for array objects that are useful for categorization of resource parameters

D : Auto-suggestion for array objects that are useful for comparing between array elements

Answer: B

Question 2

You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestionis visible in the Asset Inventory for the onboarded account, but no alerts are being generated for theconfiguration assets in the account.Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existingalert rules. ROL statements on the investigate matching those policies return config resource resultssuccessfully.Why are no alerts being generated?

Options :

A : The public cloud account is not associated with an alert notification.

B : The public cloud account does not have audit trail ingestion enabled.

C : The public cloud account does not access to configuration resources.

D : The public cloud account is not associated with an alert rule.

Answer: D

Question 3

Which RQL query will help create a custom identity and access management (1AM) policy to alert onLambda functions that have permission to terminate EC2 instances?

Options :

A : iam from cloud.resource where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’AND source.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name= ’ec2:TerminateInstances’

B : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’ec2’ AND source.cloud.resource.type = ’instance’ AND dest.cloud.service.name = ’lambda’ AND action.name = ’ec2:TerminateInstances'

C : iam from cloud.resource where cloud.type equals ’AWS’ AND cloud.resource.type equals ’lambdafunction’ AND cloud.service.name = ’ec2’ AND action.name equals ’ec2:TerminateInstances’

D : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’ ANDsource.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name = ’ec2:TerminateInstances’

Answer: D

Question 4

Given the following RQL:event from cloud.audit_logs where operation IN (‘CreateCryptoKey’, ‘DestroyCryptoKeyVersion’, ‘v1.compute.disks.createSnapshot’)Which audit event snippet is identified?

Options :

A :

B :

C :

Answer: C

Question 5

A customer has multiple violations in the environment including:User namespace is enabledAn LDAP server is enabledSSH root is enabledWhich section of Console should the administrator use to review these findings?

Options :

A : Manage

B : Vulnerabilities

C : Radar

D : Compliance

Answer: D

Free CloudSec-Pro Mock Exam – Practice Online Confidently

Buying Options: