Which factor most directly influences the data retention period you should configure in Cortex Cloud?

The number of cloud providers integrated

Compliance requirements for log retention

The geographic location of the workloads

Which Cortex Cloud license type is designed for organizations that need to protect a large number of cloud workloads with advanced features like CSPM and CIEM?

Cortex Cloud Enterprise License

Which of the following is a supported data source for Cortex Cloud?

Database query logs from on-premises SQL servers

Network switch configuration files

A government agency operates a private cloud with strict network isolation. They need to scan workloads for compliance but cannot allow any outbound traffic from the scanned environment. Which scanning model is appropriate?

Outpost scan, because the scanner runs inside the isolated environment

Outpost scan, but only if the environment has a public endpoint

Cloud scan with a private endpoint

Cloud scan, because it uses the CSP's API and does not require network changes

A security engineer is integrating Cortex Cloud with a GCP project. The integration requires reading configuration data from Compute Engine and Cloud Storage. The engineer wants to follow least-privilege. What should they do?

Assign the Editor role at the project level

Use the default service account with no additional roles

Create a custom role with read permissions for Compute Engine and Cloud Storage only

Assign the Viewer role at the project level

Palo Alto NetworksCertified Cloud Security Engineer

Domain 1Objective 2

1.2 Determine Cortex Cloud Deployment and License Requirements, Data Source Ingestion and Retention Targets, Scanning Models (e.g., Cloud Scan Versus Outpost), and Cloud Provider Identity and Access Management (IAM) Requirements (e.g., Least-Privilege) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Part of the Planning and Installation domain, which accounts for 12% of the CLOUD-SECURITY-ENGINEER exam.

25questions here

5free pages

8concepts

12%of the exam

Questions 16–20

16foundation · easy
Which factor most directly influences the data retention period you should configure in Cortex Cloud?
Select an answer first
17foundation · easy
Which Cortex Cloud license type is designed for organizations that need to protect a large number of cloud workloads with advanced features like CSPM and CIEM?
Select an answer first
18foundation · easy
Which of the following is a supported data source for Cortex Cloud?
Select an answer first
19application · medium
A government agency operates a private cloud with strict network isolation. They need to scan workloads for compliance but cannot allow any outbound traffic from the scanned environment. Which scanning model is appropriate?
Select an answer first
20expert · hard
A security engineer is integrating Cortex Cloud with a GCP project. The integration requires reading configuration data from Compute Engine and Cloud Storage. The engineer wants to follow least-privilege. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.