A company uses Cortex Cloud with agentless deployment for its AWS environment. A security analyst detects a runtime threat in a container that is not currently running but exists in the image registry. The analyst wants to ensure the threat is contained and does not reappear when the image is deployed. What should they do?

Isolate the running container immediately

Apply a CSPM compliance policy to the registry

Revoke the CIEM entitlements for the image registry

Quarantine the container image in the registry and trigger an XSIAM playbook to block its deployment

Which of the following is a key function of CIEM in Cortex Cloud?

Detecting over-privileged roles and unused permissions

Monitoring CPU usage of cloud workloads

Providing a web application firewall for cloud apps

Encrypting data in transit between cloud services

What is a key governance feature of Cortex Cloud?

Enforcing security policies across cloud environments

Offering a data loss prevention (DLP) solution for endpoints

Managing cloud cost optimization

Providing a virtual private network for remote access

Which capability is a key feature of Cortex Cloud's CSPM functionality?

Multi-cloud visibility across AWS, Azure, and Google Cloud

On-premises network traffic inspection

Encryption of data at rest in cloud storage

Identity and access management for on-premises Active Directory

A retail company must comply with PCI DSS and needs to prove that its cloud environment continuously meets the required security controls. They also want to automatically detect when a new S3 bucket is created with public read access. Which Cortex Cloud feature set should they rely on?

CIEM with identity analytics only

XSIAM with manual compliance reporting

CWPP with runtime threat detection only

CSPM with compliance frameworks and real-time policy alerts

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 4Objective 5

4.5 Explain the Features and Functionality of Cortex Cloud CYBERSECURITY-PRACTITIONER Practice Questions (Page 7)

Part of the Cloud Security domain, which accounts for 20% of the CYBERSECURITY-PRACTITIONER exam.

35questions here

7free pages

8concepts

20%of the exam

8 Concepts in This Objective

Cortex Cloud Overview
Cloud Security Posture Management (CSPM)
Cloud Workload Protection Platform (CWPP)
Cloud Infrastructure Entitlement Management (CIEM)
Threat Detection and Response
Integration with Prisma Cloud
Compliance and Governance
Deployment and Architecture

Questions 31–35

31expert · hard
A company uses Cortex Cloud with agentless deployment for its AWS environment. A security analyst detects a runtime threat in a container that is not currently running but exists in the image registry. The analyst wants to ensure the threat is contained and does not reappear when the image is deployed. What should they do?
Select an answer first
32foundation · easy
Which of the following is a key function of CIEM in Cortex Cloud?
Select an answer first
33foundation · easy
What is a key governance feature of Cortex Cloud?
Select an answer first
34foundation · easy
Which capability is a key feature of Cortex Cloud's CSPM functionality?
Select an answer first
35application · medium
A retail company must comply with PCI DSS and needs to prove that its cloud environment continuously meets the required security controls. They also want to automatically detect when a new S3 bucket is created with public read access. Which Cortex Cloud feature set should they rely on?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.