Free Palo Alto Networks CloudSec-Pro Practice Exam Questions and Answers 2026

Start Learning with the Newest and 100% Free CloudSec-Pro Exam Dumps Questions

Page: 1 / 53

Total 261 Questions | Updated On: Apr 03, 2026

Add To Cart

Question 1

A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can beperformed by the Terraform script? (Choose two.)

A : enable flow logs for Prisma Cloud.

B : create the Prisma Cloud role.

C : enable the required APIs for Prisma Cloud.

D : publish the flow log to a storage bucket.

Answer: B,C

Question 2

In Prisma Cloud for Azure Net Effective Permissions Calculation, the following Azure permission levels aresupported by which three permissions? (Choose three).

A : Resources

B : Tenant

C : Subscription

D : Resource groups

E : Management Group

Answer: A,C,E

Question 3

Which RQL query will help create a custom identity and access management (1AM) policy to alert onLambda functions that have permission to terminate EC2 instances?

A : iam from cloud.resource where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’AND source.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name= ’ec2:TerminateInstances’

B : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’ec2’ AND source.cloud.resource.type = ’instance’ AND dest.cloud.service.name = ’lambda’ AND action.name = ’ec2:TerminateInstances'

C : iam from cloud.resource where cloud.type equals ’AWS’ AND cloud.resource.type equals ’lambdafunction’ AND cloud.service.name = ’ec2’ AND action.name equals ’ec2:TerminateInstances’

D : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’ ANDsource.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name = ’ec2:TerminateInstances’

Answer: D

Question 4

The security team wants to target a CNAF policy for specific running Containers. How should theadministrator scope the policy to target the Containers?

A : scope the policy to Image names.

B : scope the policy to namespaces.

C : scope the policy to Defender names.

D : scope the policy to Host names.

Answer: A

Question 5

An administrator has added a Cloud account on Prisma Cloud and then deleted it.What will happen if the deleted account is added back on Prisma Cloud within a 24-hour period?

A : No alerts will be displayed.

B : Existing alerts will be displayed again.

C : New alerts will be generated.

D : Existing alerts will be marked as resolved.

Answer: B

Page: 1 / 53

Total 261 Questions | Updated On: Apr 03, 2026

Add To Cart