Q154. A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time.
What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)

Q155. A developer writes a serverless application to extract a field from a file in an S3 bucket. The Lambda function is assigned the S3FullAccess managed policy.

Refer to the scenario to answer this question:
Which capability of Cortex Cloud will detect the API key?

Q156. Which three types of classifications are available in the Data Security module? (Choose three.)

Q157. Per security requirements, an administrator needs to provide a list of people who are receiving e-mails for Prisma Cloud alerts.
Where can the administrator locate this list of e-mail recipients?

Q158. An administrator of Prisma Cloud wants to enable role-based access control for Docker engine.
Which configuration step is needed first to accomplish this task?

Q159. The attempted bytes count displays?

Q160. Drag and Drop Question
Which order of steps map a policy to a custom compliance standard?
(Drag the steps into the correct order of occurrence, from the first step to the last.)

Q161. Which option shows the steps to install the Console in a Kubernetes Cluster?

Q162. Which serverless cloud provider is covered by the “overly permissive service access” compliance check?

Q163. A business unit has acquired a company that has a very large AWS account footprint. The plan is to immediately start onboarding the new company’s AWS accounts into Prisma Cloud Enterprise tenant immediately. The current company is currently not using AWS Organizations and will require each account to be onboarded individually.
The business unit has decided to cover the scope of this action and determined that a script should be written to onboard each of these accounts with general settings to gain immediate posture visibility across the accounts.
Which API endpoint will specifically add these accounts into the Prisma Cloud Enterprise tenant?

Q164. Given the following RQL:

Which audit event snippet is identified by the RQL?

Q165. Taking which action will automatically enable all severity levels?

Q166. A business unit has acquired a company that has a very large AWS account footprint. The plan is to immediately start onboarding the new company’s AWS accounts into Prisma Cloud Enterprise tenant immediately. The current company is currently not using AWS Organizations and will require each account to be onboarded individually.
The business unit has decided to cover the scope of this action and determined that a script should be written to onboard each of these accounts with general settings to gain immediate posture visibility across the accounts.
Which API endpoint will specifically add these accounts into the Prisma Cloud Enterprise tenant?

Q167. A customer wants to be notified about port scanning network activities in their environment.
Which policy type detects this behavior?

Q168. A company operationalizing Cortex Cloud Data Security Posture Management (DSPM) experiences issues related to a lack of secure controls on its Amazon S3 buckets. An administrator wants to use the XQL editor to investigate S3 buckets but is unable to see any data in the Cortex Cloud console. How can the administrator ensure that data is being ingested?

Q169. Which options show the steps required to upgrade Console when using projects?

Q170. A Prisma Cloud Administrator needs to enable a Registry Scanning for a registry that stores Windows images.
Which of the following statement is correct regarding this process?

Q171. Which statement is true regarding CloudFormation templates?

Q172. A customer has serverless functions that are deployed in multiple clouds. Which serverless cloud provider is covered be “overly permissive service access” compliance check?

Q173. A development team is using Cortex Cloud for a centralized view to monitor and analyze application security posture. Which two components of Cortex Cloud will enable secure software development in this scenario? (Choose two.)

Q174. Where in the “Inventory” menu under “Endpoints” can Web Application and API Security (WAAS) profiles be set up?