An organization wants to enable a custom script that runs on endpoints to collect forensic data. They have an existing endpoint profile that is applied to all endpoints. What should they do to add this script without affecting other settings?

Create a new endpoint profile that includes the script and assign it to all endpoints.

Use a prevention profile to run the script.

Modify the existing endpoint profile to include the script directly.

Create an extension profile that includes the custom script and add it to the existing endpoint profile.

A company wants to enable a new integration that sends endpoint telemetry to a third-party SIEM. They have an existing endpoint profile that is applied to all endpoints. What should they do to enable this integration without disrupting the existing security settings?

Modify the existing endpoint profile to include the SIEM integration directly.

Create a new extension profile for the SIEM integration and add it to the existing endpoint profile.

Use a prevention profile to enable the SIEM integration.

Create a new endpoint profile that includes the SIEM integration and assign it to all endpoints.

An organization has endpoints in different geographic regions. They want to apply different prevention profiles based on the region to comply with local regulations. What is the best way to organize the endpoints for this purpose?

Assign prevention profiles to individual endpoints based on their IP address.

Create a single endpoint group for all endpoints and use a single prevention profile.

Use extension profiles to differentiate the regions.

Create endpoint groups for each region and assign the appropriate prevention profile to each group.

What is the benefit of assigning endpoint profiles and policies to endpoint groups?

It automatically patches the operating system on all endpoints

It ensures consistent security configuration across all endpoints in the group

It eliminates the need for any other security controls

It allows each endpoint in the group to have completely different settings

How does group-based policy assignment simplify endpoint management?

By allowing a single policy assignment to apply to many endpoints at once

By removing the need for endpoint profiles

By automatically generating security reports

By requiring each endpoint to have a unique policy

Palo Alto NetworksCertified Cloud Security Engineer

Domain 4Objective 2

4.2 Explain the Process of Endpoint Protection Configuration CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Part of the Runtime Security domain, which accounts for 18% of the CLOUD-SECURITY-ENGINEER exam.

21questions here

5free pages

7concepts

18%of the exam

Questions 16–20

16application · medium
An organization wants to enable a custom script that runs on endpoints to collect forensic data. They have an existing endpoint profile that is applied to all endpoints. What should they do to add this script without affecting other settings?
Select an answer first
17application · medium
A company wants to enable a new integration that sends endpoint telemetry to a third-party SIEM. They have an existing endpoint profile that is applied to all endpoints. What should they do to enable this integration without disrupting the existing security settings?
Select an answer first
18application · medium
An organization has endpoints in different geographic regions. They want to apply different prevention profiles based on the region to comply with local regulations. What is the best way to organize the endpoints for this purpose?
Select an answer first
19foundation · easy
What is the benefit of assigning endpoint profiles and policies to endpoint groups?
Select an answer first
20foundation · easy
How does group-based policy assignment simplify endpoint management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.