Palo Alto Networks Exam PCCSE Topic 1 Question 63 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 63
Topic #: 1

The security team wants to target a CNAF policy for specific running Containers. How should the administrator scope the policy to target the Containers?

Ascope the policy to Image names.

Bscope the policy to namespaces.

Cscope the policy to Defender names.

Dscope the policy to Host names.

Show Suggested Answer

Suggested Answer: B, C

by Joesph at Aug 31, 2023, 05:40 PM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Terina

2 months ago

What, no option to scope it to the color of the containers? That's the only way I'm passing this exam!

upvoted 0 times

Tasia

17 days ago

C) scope the policy to Defender names.

upvoted 0 times

...

Glory

19 days ago

B) scope the policy to namespaces.

upvoted 0 times

...

Nicolette

26 days ago

A) scope the policy to Image names.

upvoted 0 times

...

Laura

2 months ago

Defender names? Really? That's like trying to herd cats. Namespaces all the way, baby!

upvoted 0 times

Herminia

2 months ago

Defender names? Really? That's like trying to herd cats. Namespaces all the way, baby!

upvoted 0 times

...

Kenneth

2 months ago

C) scope the policy to Defender names.

upvoted 0 times

...

Elsa

2 months ago

B) scope the policy to namespaces.

upvoted 0 times

...

Mabel

2 months ago

A) scope the policy to Image names.

upvoted 0 times

...

Theron

2 months ago

I'm gonna go with option B. Namespaces just make the most sense for this use case. Anything else would be like using a sledgehammer to crack a nut.

upvoted 0 times

...

Kanisha

3 months ago

But targeting Image names would ensure specific running Containers are covered, don't you think?

upvoted 0 times

...

Eliseo

3 months ago

I disagree, I believe scoping the policy to namespaces would be more effective.

upvoted 0 times

...

Rosendo

3 months ago

Hmm, I think scoping the policy to namespaces would be the way to go. That's the most logical approach to target specific running containers.

upvoted 0 times

Salina

28 days ago

Scoping the policy to Defender names might be too specific, namespaces are more flexible.

upvoted 0 times

...

Kirby

29 days ago

I think scoping the policy to Image names could also work, but namespaces seem more precise.

upvoted 0 times

...

Denny

1 months ago

Definitely, targeting specific running containers through namespaces is the way to go.

upvoted 0 times

...

Dick

1 months ago

I agree, scoping the policy to namespaces makes the most sense.

upvoted 0 times

...

Kanisha

3 months ago

I think the administrator should scope the policy to Image names.

upvoted 0 times

...