In Cortex Cloud, how is data retention configured?

By setting a retention period in the Cortex Cloud console settings

By contacting support to adjust retention

By setting a lifecycle rule in the Cortex Cloud S3 bucket

By configuring retention policies in the cloud provider's storage service

Which method is used to ingest cloud resource configuration data into Cortex Cloud?

Agent-based collection from each virtual machine

API-based integration with the cloud provider

Syslog forwarding from on-premises firewalls

A multinational corporation operates in regions with strict data residency laws. They want to use Cortex Cloud to scan workloads but must ensure that all scanning metadata and findings remain within a specific geographic boundary. Which deployment consideration is most important?

Configuring the cloud scan model to avoid data transfer

Disabling all data retention to prevent data leaving the region

Using an Outpost scanner in each region to keep data local

Selecting a Cortex Cloud region that aligns with the data residency requirement

A company has a highly regulated environment where data cannot leave the premises. They want to use Cortex Cloud for scanning but must ensure all scanning data stays local. Which approach should they take?

Use Outpost scan but allow it to send metadata to the cloud

Use cloud scan and disable all data retention

Use cloud scan with a private endpoint to keep data within the cloud provider's network

Deploy an Outpost scanner and configure it to store all data locally

A growing company expects to double its cloud resources in the next year. They are evaluating Cortex Cloud licenses and want to avoid over-provisioning while ensuring they can scale. Which license consideration is most important?

Choose a license that allows adding capacity as needed

Choose the largest license available to avoid future upgrades

Choose a license based on the current number of resources only

Choose the smallest license to minimize costs

Palo Alto NetworksCertified Cloud Security Engineer

Domain 1Objective 2

1.2 Determine Cortex Cloud Deployment and License Requirements, Data Source Ingestion and Retention Targets, Scanning Models (e.g., Cloud Scan Versus Outpost), and Cloud Provider Identity and Access Management (IAM) Requirements (e.g., Least-Privilege) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Part of the Planning and Installation domain, which accounts for 12% of the CLOUD-SECURITY-ENGINEER exam.

25questions here

5free pages

8concepts

12%of the exam

Questions 1–5

1foundation · easy
In Cortex Cloud, how is data retention configured?
Select an answer first
2foundation · easy
Which method is used to ingest cloud resource configuration data into Cortex Cloud?
Select an answer first
3application · medium
A multinational corporation operates in regions with strict data residency laws. They want to use Cortex Cloud to scan workloads but must ensure that all scanning metadata and findings remain within a specific geographic boundary. Which deployment consideration is most important?
Select an answer first
4expert · hard
A company has a highly regulated environment where data cannot leave the premises. They want to use Cortex Cloud for scanning but must ensure all scanning data stays local. Which approach should they take?
Select an answer first
5expert · hard
A growing company expects to double its cloud resources in the next year. They are evaluating Cortex Cloud licenses and want to avoid over-provisioning while ensuring they can scale. Which license consideration is most important?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.