Exam PCCSE topic 1 question 206 discussion

Actual exam question from Palo Alto Networks's PCCSE

Question #: 206
Topic #: 1

Given the following information, which twistcli command should be run if an administrator were to exec into a running container and scan it from within using an access token for authentication?

• Console is located at https://prisma-console.mydomain.local
• Token is: TOKEN_VALUE
• Report ID is: REPORT_ID
• Container image running is: myimage:latest

A. twistcli images scan --address https://prisma-console.mydomain.local --token TOKEN_VALUE --containerized --details myimage:latest
B. twistcli images scan --console-address https://prisma-console.mydomain.local --auth-token TOKEN_VALUE --containerized --vulnerability-details REPORT_ID
C. twistcli images scan --address https://prisma-console.mydomain.local --token TOKEN_VALUE --containerized --details REPORT_ID
D. twistcli images scan --console-address https://prisma-console.mydomain.local --auth-token MY_TOKEN --local-scan --details myimage:latest

Show Suggested Answer

Suggested Answer: C 🗳️

by Spippolo at June 9, 2023, 8:30 p.m.

Comments

Submit Cancel

nedeb514

10 months, 4 weeks ago

Selected Answer: C

The response from Jihe would be correct if this wasn't be run from within the container. In the question, we are running from inside the container, and therefor there is no need to specify an image/tarball. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/tools/twistcli_scan_image Further down in the documentation linked by Jihe, there is a section that shows the proper syntax when running twistcli from within a container. The example there is almost a perfect copy of this question. Spippolo has the correct response.

upvoted 1 times

...

Jihe

1 year, 1 month ago

A Syntax When using 'twistcli images scan', the IMAGE or TARBALL to scan MUST be the LAST PARAMETER. If you specify options after the image or tarball, they are ignored. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/tools/twistcli_scan_images

upvoted 2 times

...

Spippolo

1 year, 1 month ago

Selected Answer: C

C $ docker run \ -v /PATH/TO/TWISTCLI_DIR:/tools \ -e TW_TOKEN=<API_TOKEN> \ -e TW_CONSOLE=<COMPUTE_CONSOLE> \ --entrypoint="" \ <IMAGE_NAME> \ /tools/twistcli images scan \ --containerized \ --details \ --address $TW_CONSOLE \ --token $TW_TOKEN \ <REPORT_ID> https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/tools/twistcli_scan_images

upvoted 2 times

...