A healthcare organization stores patient records in a cloud database. The security team must ensure that only authorized personnel can view the data and that sensitive fields, such as social security numbers, are not exposed in logs or reports. What should the team configure in Cortex Cloud?

A compliance report that maps the database configuration to HIPAA requirements

Data protection features including encryption, masking, and access controls on the database and related logs

A rule that alerts when a user accesses the database from a new location

A users indicator type to track which users have accessed the database

A financial services company must demonstrate compliance with PCI DSS to its auditor. The auditor requires evidence that access to cardholder data environments is restricted and that security policies are enforced. The security team uses Cortex Cloud. What should the team present to the auditor?

The raw log data from all firewalls and endpoints for the last year

A list of all users and roles indicator types that have accessed the cardholder data environment

Compliance reports generated from the compliance management module that map controls to PCI DSS requirements

The data protection settings showing encryption and masking are enabled on all storage

What is the primary purpose of the IP address indicator type in Cortex Cloud?

To identify network-based threats by tracking suspicious IP addresses

To assign private IP addresses to virtual machines in a VNet

To resolve domain names to their corresponding IP addresses

To store the geographic location of all cloud resources

A security analyst is investigating a phishing campaign where users clicked on a link that redirected to a credential-harvesting page. The analyst has the full URL of the phishing page. What is the most effective way to track all users who accessed this specific web resource in Cortex Cloud?

Create a URL indicator for the phishing page and correlate it with web traffic logs

Add the IP address of the web server as an IP address indicator

Search the asset inventory for the URL as a managed web application

Create a domain indicator for the parent domain and block the entire domain

Palo Alto NetworksCertified Cloud Security Professional

Domain 2Objective 1

2.1 Explain the Function of Key Components of Cortex Cloud CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Part of the Cortex Fundamentals domain, which accounts for 15% of the CLOUD-SECURITY-PROFESSIONAL exam.

39questions here

8free pages

11concepts

15%of the exam

Questions 21–25

21application · medium
A healthcare organization stores patient records in a cloud database. The security team must ensure that only authorized personnel can view the data and that sensitive fields, such as social security numbers, are not exposed in logs or reports. What should the team configure in Cortex Cloud?
Select an answer first
22application · medium
A financial services company must demonstrate compliance with PCI DSS to its auditor. The auditor requires evidence that access to cardholder data environments is restricted and that security policies are enforced. The security team uses Cortex Cloud. What should the team present to the auditor?
Select an answer first
23foundation · easy
What is the primary purpose of the IP address indicator type in Cortex Cloud?
Select an answer first
24application · medium
A security analyst is investigating a phishing campaign where users clicked on a link that redirected to a credential-harvesting page. The analyst has the full URL of the phishing page. What is the most effective way to track all users who accessed this specific web resource in Cortex Cloud?
Select an answer first
25foundation · easy
Which is a common use case for Cortex Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.