A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed. How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
A.
set the Container model to manual relearn and set the default runtime rule to block for process protection.
B.
set the Container model to relearn and set the default runtime rule to prevent for process protection.
C.
add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list, and set the action to ג€preventג€.
D.
choose ג€copy into ruleג€ for the Container, add a ransomWare process into the denied process list, and set the action to ג€blockג€.
Prevent — Defender stops the process (and just the process) that violates your policy from executing.
Block — Defender stops the entire container if a process that violates your policy attempts to run.
D.
https://docs.prismacloud.io/en/classic/compute-admin-guide/runtime-defense/runtime-defense-containers#effect
D is the right option. Prevent only blocks containers from running processes, whereas the requirment is to terminate the container, which is only possible by Block. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/runtime_defense_containers
Option C is the correct answer. The administrator should add a new runtime policy targeted at a specific Container name, add the ransomWare process into the denied process list, and set the action to "prevent". This will prevent the ransomWare process from being executed in the Container image topSecret:latest.
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.PCCSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
[Removed]
Highly Voted 3 years, 7 months agoPhoennix
2 years, 8 months agoelzm
Most Recent 10 months agoJohnOrtiz
11 months, 2 weeks agosteven_xie2
1 year, 6 months agoSpippolo
1 year, 11 months agokumar_57
2 years, 1 month agoShivam_ayir
2 years, 1 month agoNodummyIQ
2 years, 3 months ago