In a trusted images policy, what does 'allowlisting' an image source accomplish?

It automatically scans images from that source for vulnerabilities

It logs all deployments from that source for audit purposes

It permits deployment of images from that source while blocking others

It encrypts images from that source at rest

What is the role of severity thresholds in malware detection rules in Prisma Cloud?

To determine which malware findings trigger alerts or response actions

To specify which scanner type is used for detection

To define the scope of workloads the rule applies to

To map the rule to a compliance standard

A company uses Prisma Cloud to manage container images. The security team wants to ensure that only images from their private registry 'myregistry.azurecr.io' are allowed to run in their production environment. They want to block any other image from running. Which configuration should they use?

Create a misconfiguration rule that checks the image registry and sets the action to 'Remediate'.

Create a custom rule that checks the image registry and sets the action to 'Alert'.

Create a trusted images policy that allows images from 'myregistry.azurecr.io' and blocks all others.

Create a malware detection rule that checks the image registry and sets the action to 'Quarantine'.

What is the primary purpose of misconfiguration rules in Prisma Cloud?

To scan for malware in cloud workloads

To detect and remediate cloud workload configurations that violate compliance standards or best practices

To identify exposed secrets in cloud workloads

To block untrusted container images from being deployed

Palo Alto NetworksCertified Cloud Security Engineer

Domain 3Objective 4

3.4 Explain the Creation and Configuration of Cloud Workload Rules and Policies (e.g., Custom Rules, Scanner Type, Misconfiguration, Malware, Secrets, Trusted Images) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Posture Security domain, which accounts for 22% of the CLOUD-SECURITY-ENGINEER exam.

18questions here

4free pages

8concepts

22%of the exam

Questions 11–15

11foundation · easy
In a trusted images policy, what does 'allowlisting' an image source accomplish?
Select an answer first
12foundation · easy
What is the role of severity thresholds in malware detection rules in Prisma Cloud?
Select an answer first
13application · medium
A company uses Prisma Cloud to manage container images. The security team wants to ensure that only images from their private registry 'myregistry.azurecr.io' are allowed to run in their production environment. They want to block any other image from running. Which configuration should they use?
Select an answer first
14foundation · easy
What are the two primary enforcement modes for cloud workload rules in Prisma Cloud?
Select an answer first
15foundation · easy
What is the primary purpose of misconfiguration rules in Prisma Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.