exam questions

Exam PCCSE All Questions

View all questions & answers for the PCCSE exam

Exam PCCSE topic 1 question 106 discussion

Actual exam question from Palo Alto Networks's PCCSE
Question #: 106
Topic #: 1
[All PCCSE Questions]

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.

Which type of policy should be created to protect this pod from Layer7 attacks?

  • A. The development team should create a WAAS rule for the host where these pods will be running.
  • B. The development team should create a WAAS rule targeted at all resources on the host.
  • C. The development team should create a runtime policy with networking protections.
  • D. The development team should create a WAAS rule targeted at the image name of the pods.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Chichi23
2 months, 2 weeks ago
D. The development team should create a WAAS rule targeted at the image name of the pods.
upvoted 1 times
...
HARRY
5 months, 2 weeks ago
Selected Answer: D
Image is the correct way of scoping the rule. Although host and image can be used to scope the rule. but the host can have other application pods which can be none web apps. scoping based on Image will make sure the rule only applies to the containers created from the web image. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/deploy_waas
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago