What is the core principle of least-privilege IAM design for Cortex Cloud?

Grant only the permissions necessary for Cortex Cloud to function

Grant the same permissions to all users for simplicity

Grant permissions based on the user's job title

Grant all permissions and then restrict based on alerts

A company wants to scan AWS resources for misconfigurations using Cortex Cloud. They have enabled CloudTrail and want to ensure the integration can read the trail. What is the minimum IAM permission required?

Write access to the CloudTrail trail to enable logging

Read access to the CloudTrail trail and the S3 bucket where logs are stored

Access to the CloudTrail console only

Full access to CloudTrail and S3

A small startup wants to use Cortex Cloud to monitor a few cloud workloads with basic security features. Which license type would be most appropriate?

Cortex Cloud Enterprise License

In the Outpost scan model, where is the scanning engine deployed?

In Palo Alto Networks' cloud infrastructure

On a third-party cloud provider's infrastructure

On-premises in the customer's data center

In the customer's cloud environment

An organization is integrating Azure with Cortex Cloud. The security team wants to ensure the integration uses the minimum permissions necessary to read security findings and configuration data. What should they configure?

A custom role with read permissions limited to the specific resource groups and services Cortex Cloud needs

A service principal with no role assignments and rely on managed identity

The built-in Contributor role on the subscription

The built-in Reader role on the entire subscription

Palo Alto NetworksCertified Cloud Security Engineer

Domain 1Objective 2

1.2 Determine Cortex Cloud Deployment and License Requirements, Data Source Ingestion and Retention Targets, Scanning Models (e.g., Cloud Scan Versus Outpost), and Cloud Provider Identity and Access Management (IAM) Requirements (e.g., Least-Privilege) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Planning and Installation domain, which accounts for 12% of the CLOUD-SECURITY-ENGINEER exam.

25questions here

5free pages

8concepts

12%of the exam

Questions 6–10

6foundation · easy
What is the core principle of least-privilege IAM design for Cortex Cloud?
Select an answer first
7application · medium
A company wants to scan AWS resources for misconfigurations using Cortex Cloud. They have enabled CloudTrail and want to ensure the integration can read the trail. What is the minimum IAM permission required?
Select an answer first
8foundation · easy
A small startup wants to use Cortex Cloud to monitor a few cloud workloads with basic security features. Which license type would be most appropriate?
Select an answer first
9foundation · easy
In the Outpost scan model, where is the scanning engine deployed?
Select an answer first
10application · medium
An organization is integrating Azure with Cortex Cloud. The security team wants to ensure the integration uses the minimum permissions necessary to read security findings and configuration data. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.