A GitHub repository contains a Kubernetes manifest with a misconfiguration that allows privileged containers. The security team wants Prisma Cloud to block the merge of any pull request that introduces this misconfiguration. What should be configured?

Enable a Prisma Cloud policy for Kubernetes misconfigurations and add the Prisma Cloud check as a required status check in GitHub branch protection.

Use a GitHub Actions workflow that runs a kubectl command to validate the manifest and fails on any error.

Configure Prisma Cloud to automatically revert the pull request when the misconfiguration is detected.

Configure the repository to require a manual approval from the security team before merging.

A team wants Prisma Cloud to scan only the 'main' branch of their GitHub repository and not any feature branches. What should be configured in the repository scan settings?

Set the branch filter to include only the 'main' branch.

Remove all other branches from the GitHub repository.

Configure the GitHub app to have read access only to the 'main' branch.

Use a Jenkins job to scan only the 'main' branch and disable the GitHub integration.

A developer has created a new repository in the GitHub organization and expects Prisma Cloud to scan it automatically. However, the repository is not appearing in the Prisma Cloud console. What is the most likely reason?

The new repository was not added to the Prisma Cloud integration's repository list.

The developer does not have permission to view the repository in Prisma Cloud.

The GitHub app does not have read access to the new repository.

The repository is empty and has no files to scan.

A GitHub integration in Prisma Cloud is failing to scan a repository. What is a common cause?

The repository is too large to scan

The personal access token has expired or lacks the required permissions

Prisma Cloud does not support GitHub

Palo Alto NetworksCertified Cloud Security Engineer

Domain 2Objective 3

2.3 Explain the Process of Onboarding Application Development and Deployment Systems (e.g., GitHub, Jenkins) CLOUD-SECURITY-ENGINEER Practice Questions (Page 6)

Part of the Integration domain, which accounts for 16% of the CLOUD-SECURITY-ENGINEER exam.

29questions here

6free pages

7concepts

16%of the exam

Questions 26–29

26application · medium
A GitHub repository contains a Kubernetes manifest with a misconfiguration that allows privileged containers. The security team wants Prisma Cloud to block the merge of any pull request that introduces this misconfiguration. What should be configured?
Select an answer first
27application · medium
A team wants Prisma Cloud to scan only the 'main' branch of their GitHub repository and not any feature branches. What should be configured in the repository scan settings?
Select an answer first
28application · medium
A developer has created a new repository in the GitHub organization and expects Prisma Cloud to scan it automatically. However, the repository is not appearing in the Prisma Cloud console. What is the most likely reason?
Select an answer first
29foundation · easy
A GitHub integration in Prisma Cloud is failing to scan a repository. What is a common cause?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.