
Palo Alto NetworksCertified Cloud Security Engineer
Domain 3Objective 4
3.4 Explain the Creation and Configuration of Cloud Workload Rules and Policies (e.g., Custom Rules, Scanner Type, Misconfiguration, Malware, Secrets, Trusted Images) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)
Part of the Posture Security domain, which accounts for 22% of the CLOUD-SECURITY-ENGINEER exam.
18questions here
4free pages
8concepts
22%of the exam
Questions 6–10
- 6
Which scanner type in Prisma Cloud is best suited for scanning container images stored in a registry?
Select an answer first - 7
When configuring a malware detection rule in Prisma Cloud, what can you define to control how the rule responds?
Select an answer first - 8
For scanning serverless functions in Prisma Cloud, which scanner type should be selected?
Select an answer first - 9
A company uses Prisma Cloud to protect its hybrid environment. They have a set of on-premises VMs and a set of AWS EC2 instances. The security team wants to scan both sets of workloads for malware. They want to minimize the number of agents deployed and avoid scanning the same workload twice. Which scanner type should they use?
Select an answer first - 10
When a secrets detection rule in Prisma Cloud identifies an exposed secret, what can the rule trigger?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.