NO.18 An administrator sees that a runtime audit has been generated for a host. The audit message is:
“Service postfix attempted to obtain capability SHELL by executing /bin/sh /usr/libexec/postfix/postfix- script.stop. Low severity audit, event is automatically added to the runtime model” Which runtime host policy rule is the root cause for this runtime audit?

NO.19 Which container scan is constructed correctly?

NO.20 A security team is deploying Cloud Native Application Firewall (CNAF) on a containerized web application. The application is running an NGINX container. The container is listening on port 8080 and is mapped to host port 80.
Which port should the team specify in the CNAF rule to protect the application?

NO.21 Which two processes ensure that builds can function after a Console upgrade? (Choose two )

NO.22 An administrator has been tasked with creating a custom service that will download any existing compliance report from a Prisma Cloud Enterprise tenant.
In which order will the APIs be executed for this service?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

NO.23 You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is necessary to complete this policy?

NO.24 Match the correct scanning mode for each given operation.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

NO.25 What are the two ways to scope a CI policy for image scanning? (Choose two.)

NO.26 Which field is required during the creation of a custom config query?

NO.27 Which container image scan is constructed correctly?

NO.28 Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

NO.29 An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same ports as the default Prisma Compute Console configuration.
In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS. Which port will twistcli need to use to access the Prisma Compute APIs?

NO.30 An administrator wants to enforce a rate limit for users not being able to post five (5) .tar.gz files within five (5) seconds.
What does the administrator need to configure?

NO.31 Which type of compliance check is available for rules under Defend > Compliance > Containers and Images
> CI?

NO.32 A customer finds that an open alert from the previous day has been resolved No auto-remediation was configured Which two reasons explain this change in alert status? (Choose two )

NO.33 What is the order of steps to create a custom network policy?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

NO.34 The security team wants to protect a web application container from an SQLi attack. Which type of policy should the administrator create to protect the container?

NO.35 A customer finds that an open alert from the previous day has been resolved. No auto-remediation was configured.
Which two reasons explain this change in alert status? (Choose two.)

NO.36 Which three Options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)

NO.37 The security team wants to target a CNAF policy for specific running Containers. How should the administrator scope the policy to target the Containers?