|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/pccse-prisma-certified-cloud-security-engineer-exam-test/
课程评论：没有评论
课程名称：（PCCSE）Prisma 认证云安全工程师考试测试 课程概述： 欢迎参加Prisma认证云安全工程师考试（经过验证的QA）。Palo Alto Networks认证云安全工程师（PCCSE）认证旨在验证在所有Prisma Cloud方面进行入驻、部署和管理所需的知识、技能和能力。PCCSE涵盖了Prisma Cloud、Prisma Cloud企业版和Prisma Cloud Compute，展示个人在整个开发生命周期及多云和混合云环境中对Prisma Cloud平台应用、数据和整个云原生技术栈的知识。 考试领域目标： - 云安全态势管理（CSPM） - 云工作负载保护（CWP） - Prisma Cloud管理 - 云网络安全及基于身份的微分段企业版 - Prisma Cloud代码安全（PCCS） - 身份与访问管理（IAM）/ Prisma Cloud数据安全（PCDS） 课程内容主要包括资源识别、政策配置、合规标准设置、警报与通知配置、第三方集成、事件调查及处理、备份与恢复管理、身份和访问管理等多个任务和功能模块，重点培养学员在云环境中安全管理和防护能力。 请注意，"Palo Alto Networks Prisma"和"Prisma Certified Cloud Security Engineer (PCCSE)"是Palo Alto Networks的注册商标。本实践考试仅供考试练习，课程与Palo Alto Networks并无任何官方关联、许可或商标认证。
Welcome to Exam Prisma Certified Cloud Security Engineer Exam (Verified QA)The Palo Alto Networks Certified Cloud Security Engineer (PCCSE) certification validates the knowledge, skills, and abilities required to onboard, deploy, and administer all aspects of Prisma Cloud. PCCSE covers Prisma Cloud, Prisma Cloud Enterprise, and Prisma Cloud Compute. It showcases an individual's knowledge of the Prisma Cloud platform applications, data, and the entire cloud native technology stack-throughout the development lifecycle and across multi- and hybrid cloud environments.Exam Domain Objective:-Domain 1 Cloud Security Posture Management (CSPM) Task 1.1 Identify assets in a Cloud account1.1.1 Inventory of resources in a cloud account1.1.2 Resource configuration history1.1.3 Asset configuration changesTask 1.2 Configure policies1.2.1 Custom policies1.2.2 Policy types1.2.3 Supported variables within configuration-run custom policiesTask 1.3 Configure compliance standards1.3.1 Standards1.3.2 ReportsTask 1.4 Configure alerting and notifications1.4.1 Alert states1.4.2 Alert rules1.4.3 Alert notifications and reports1.4.4 Alert workflowTask 1.5 Use third-party integrations1.5.1 Inbound and outbound notificationsTask 1.6 Perform ad hoc investigations1.6.1 Resource configuration with RQL1.6.2 User activity using RQL1.6.3 Network activity using RQL1.6.4 Anomalous user events1.6.5 Asset details using RQLTask 1.7 Remediate alerts1.7.1 Auto-remediation1.7.2 Manual versus automated remediationTask 1.8 Use SecOps Dashboard1.8.1 Internet-connected assets by source network traffic behavior1.8.2 ComponentsDomain 2 Cloud Workload Protection (CWP) Task 2.1 Monitor and defend against image vulnerabilities2.1.1 Options available in the Monitor section2.1.2 Options available in the Policies sectionTask 2.2 Monitor and defend against host vulnerabilities2.2.1 Options available in the Monitor section2.2.2 Options available in the Policies sectionTask 2.3 Monitor and enforce image/container compliance2.3.1 Options available in the Monitor section2.3.2 Options available in the Policies sectionTask 2.4 Monitor and enforce host compliance2.4.1 Options available in the Monitor section2.4.2 Options available in the Policies sectionTask 2.5 Monitor and defend containers and hosts during runtime2.5.1 Container models2.5.2 Host observations2.5.3 Runtime policies2.5.4 Runtime audits2.5.5 Incidents using Incident ExplorerTask 2.6 Monitor and protect against serverless vulnerabilities2.6.1 Monitor2.6.2 Policy2.6.3 Auto-protectTask 2.7 Configure WAAS2.7.1 Application specifications2.7.2 API methods2.7.3 Rest API endpoints2.7.4 DoS protection2.7.5 Access control to Limit inbound sources2.7.6 Network lists2.7.7 Access control to enforce HTTP headers and file uploads2.7.8 Bot protection2.7.9 Rules2.7.10 Audit logsTask 2.8 Monitor and protect registries2.8.1 Scanning2.8.2 CIDomain 3 Install, Upgrade, and Backup / Prisma Cloud Administration Task 3.1 Deploy and manage Console for the Compute Edition3.1.1 Prisma Cloud release software3.1.2 Console in Onebox configuration3.1.3 Upgrade on Console3.1.4 Business use case to determine Prisma Cloud version to use3.1.5 Tenant versus Scale projectsTask 3.2 Deploy and manage defenders3.2.1 Types3.2.2 Networking for Defender-To-Console connectivity3.2.3 Upgrade and CompatibilityTask 3.3 Configure Agentless Security3.3.1 Agent versus Agentless3.3.2 Cloud discoveryTask 3.4 Backup and restore Console3.4.1 Backup management3.4.2 Disaster recoveryTask 3.5 Manage authentication3.5.1 Certificates3.5.2 Secrets and credentials storeTask 3.6 Onboard accounts3.6.1 Onboard cloud accounts3.6.2 Account GroupsTask 3.7 Configure access control3.7.1 Users, roles, and permission groups3.7.2 Access control troubleshooting3.7.3 Service accounts and access keys3.7.4 Single Sign On3.7.5 Role-based access control for Docker Engine (CWP)3.7.6 Admission control with Open Policy Agent (CWP3.7.7 Resource lists and collectionsTask 3.8 Configure logging3.8.1 Audit logging3.8.2 Defender loggingTask 3.9 Manage enterprise settings3.9.1 Anomaly settings3.9.2 Idle timeout3.9.3 Auto-enable policies3.9.4 Alert dismissal reason3.9.5 User attribution3.9.6 Licensing3.9.7 Access key maximum validityTask 3.10 Configure third-party integrations3.10.1 Inbound and outbound notifications3.10.2 Supported capabilitiesTask 3.11 Leverage Cloud and Compute APIs3.11.1 Authenticate with APIs3.11.2 API documentation3.11.3 Policies and custom queries by API3.11.4 Alerts and Reports using APIs3.11.5 Vulnerability results via API3.11.6 Access keys3.11.7 Data security and IAM APIsTask 3.12 Leverage Adoption Advisor and Alarm Center3.12.1 Notification rule3.12.2 Adoption Advisor guidanceTask 3.13 Access Knowledge Center and Help Center3.13.1 Knowledge Center3.13.2 Help Center3.13.3 Feature requests3.13.4 PCCSE3.13.5 Live Community3.13.6 Product status updates3.13.7 Docs, Prisma Cloud Privacy and Support optionsDomain 4 Cloud Network Security and Identity-Based Microsegmentation Enterprise EditionTask 4.1 Configure Cloud network analyzer4.1.1 Network exposure policy4.1.2 RQLTask 4.2 Deploy and manage Enforcers4.2.1 Processing units4.2.2 Namespaces4.2.3 Tags and identity4.2.4 Network rulesets4.2.5 Out-of-the-box rules4.2.6 Application profilingTask 4.3 Manage local changes in a remote repository (dev-prod) Configuration4.3.1 Types4.3.2 Networking for Enforcers-to-Console connectivityTask 4.4 Use NetSecOps dashboard4.4.1 FlowsDomain 5 Prisma Cloud Code Security (PCCS)Task 5.1 Implement scanning for IAC templates5.1.1 Terraform and Cloudformation scanning configurations5.1.2 OOTB IAC scanning integrations5.1.3 API scanning5.1.4 IAC scanning integration5.1.5 Supply-chain security5.1.6 Handling scanned issues5.1.7 Repository scanningTask 5.2 Configure policies in Console for IAC scanning5.2.1 OOTB policies5.2.2 Custom build policies5.2.3 Types of config policies5.2.4 Prisma configuration filesTask 5.3 Configure CI policies for Compute scanning5.3.1 Default CI policies5.3.2 Custom CI policiesTask 5.4 Manage configuration settings5.4.1 Code reviews5.4.2 Code repository settings5.4.3 Notifications5.4.4 Pull requests and tagging botsDomain 6 Identity and Access Management (IAM)/Prisma Cloud Data Security (PCDS)Task 6.1 Calculate net effective permissions6.1.1 AWS calculation6.1.2 Azure calculationTask 6.2 Investigate incidents and create IAM policies6.2.1 RQL queries6.2.2 IAM policiesTask 6.3 Integrate IAM with IdP6.3.1 Azure active directory6.3.2 OktaTask 6.4 Remediate alerts6.4.1 Manual versus automatic6.4.2 AWS remediation6.4.3 Azure remediationTask 6.5 Monitor Scan Results6.5.1 Monitor Scan Results6.5.2 Data Inventory6.5.3 Resource Explorer6.5.4 Object Explorer6.5.5 Exposure EvaluationTask 6.6 Assess Data Policies and Alerts6.6.1 Data policy vs data pattern6.6.2 AlertsTask 6.7 Define data security scan settings6.7.1 Scan configuration6.7.2 Data profile and pattern6.7.3 File extensions6.7.4 Snippet masking"Palo Alto Networks Prisma", "Prisma Certified Cloud Security Engineer (PCCSE)" are registered marks of Palo Alto Networks.This practice test is only for exam practice questions. This is an Unofficial course and this course is not affiliated, licensed or trademarked with Palo Alto Networks in any way.
