Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks CloudSec-Pro Exam - Topic 3 Question 13 Discussion

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.Which type of policy should be created to protect this pod from Layer7 attacks?
D) The development team should create a WAAS rule targeted at the image name of the pods.
A) The development team should create a WAAS rule for the host where these pods will be running.
B) The development team should create a WAAS rule targeted at all resources on the host.
C) The development team should create a runtime policy with networking protections.

Palo Alto Networks CloudSec-Pro Exam - Topic 3 Question 13 Discussion

Actual exam question for Palo Alto Networks's CloudSec-Pro exam
Question #: 13
Topic #: 3
[All CloudSec-Pro Questions]

The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.

Which type of policy should be created to protect this pod from Layer7 attacks?

Show Suggested Answer Hide Answer
Suggested Answer: D

To protect the pods hosting a web front end from Layer 7 attacks, the development team should create a Web Application and API Security (WAAS) rule targeted at the image name of the pods. This approach allows the policy to specifically protect the applications running within the pods against sophisticated attacks that target the application layer.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/deploy_waas


by Gertude at Jun 28, 2026, 05:46 AM

Limited Time Offer

25%

Off

Get Premium CloudSec-Pro Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Giuseppe
1 day ago
Wait, I didn't know WAAS could be used like this!
upvoted 0 times
...
Lenita
7 days ago
C sounds solid, runtime policies are crucial for security!
upvoted 0 times
...
Curtis
12 days ago
Isn't D too narrow? What if the image name changes?
upvoted 0 times
...
Marge
17 days ago
I disagree, B seems more comprehensive for all resources.
upvoted 0 times
...
Jacki
22 days ago
I think option A is the best choice for specific protection.
upvoted 0 times
...
Alethea
27 days ago
I feel like option B could be a good choice since it mentions all resources on the host, but I’m not entirely confident about the implications for Layer 7 attacks.
upvoted 0 times
...
Raylene
1 month ago
I practiced a similar question where we had to choose between WAAS rules and runtime policies, and I think targeting the image name might be too narrow.
upvoted 0 times
...
Margo
1 month ago
I think option C sounds right because runtime policies usually deal with network protections, but I can't recall if they cover Layer 7 attacks specifically.
upvoted 0 times
...
Meaghan
1 month ago
I remember something about WAAS rules being specifically designed for web application security, but I'm not sure if they should be host-specific or resource-specific.
upvoted 0 times
...

Save Cancel