An organization wants to use Cortex Cloud to protect workloads that are deployed in a single public cloud region. Which deployment model is most appropriate?

Edge deployment using a local appliance for data collection

Virtual private cloud deployment within the customer's cloud account

On-premises deployment in the same data center as the workloads

SaaS deployment with data residency in the same region as the workloads

What is the primary IAM requirement for integrating a cloud provider with Cortex Cloud?

A service account with write permissions to all storage buckets

A user account with multi-factor authentication enabled

An admin user with full access to all cloud resources

A service role with read-only permissions to the required resources

When is the Outpost scan model preferred over the cloud scan model?

When the customer wants to reduce costs

When the customer needs to keep data within their own environment

When the customer wants to avoid deploying any infrastructure

When the customer has a small number of workloads

A company has a large number of workloads in a public cloud and wants to scan them for vulnerabilities. They are considering cloud scan versus Outpost scan. Which factor should most influence their decision?

The need for outbound internet connectivity from the scanned workloads

The number of workloads to be scanned

A security team needs to deploy Cortex Cloud to monitor workloads across multiple cloud providers and on-premises environments. Which deployment model is designed for this scenario?

On-premises deployment where all components are installed in the customer's data center

Hybrid deployment where the management plane is on-premises and the data plane is in the cloud

Community edition deployment that is free and self-managed

SaaS-based deployment where Cortex Cloud is hosted and managed by Palo Alto Networks

Palo Alto NetworksCertified Cloud Security Engineer

Domain 1Objective 2

1.2 Determine Cortex Cloud Deployment and License Requirements, Data Source Ingestion and Retention Targets, Scanning Models (e.g., Cloud Scan Versus Outpost), and Cloud Provider Identity and Access Management (IAM) Requirements (e.g., Least-Privilege) CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Part of the Planning and Installation domain, which accounts for 12% of the CLOUD-SECURITY-ENGINEER exam.

25questions here

5free pages

8concepts

12%of the exam

Questions 21–25

21foundation · easy
An organization wants to use Cortex Cloud to protect workloads that are deployed in a single public cloud region. Which deployment model is most appropriate?
Select an answer first
22foundation · easy
What is the primary IAM requirement for integrating a cloud provider with Cortex Cloud?
Select an answer first
23foundation · easy
When is the Outpost scan model preferred over the cloud scan model?
Select an answer first
24expert · hard
A company has a large number of workloads in a public cloud and wants to scan them for vulnerabilities. They are considering cloud scan versus Outpost scan. Which factor should most influence their decision?
Select an answer first
25foundation · easy
A security team needs to deploy Cortex Cloud to monitor workloads across multiple cloud providers and on-premises environments. Which deployment model is designed for this scenario?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.