Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed. How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
A.
set the Container model to manual relearn and set the default runtime rule to block for process protection.
B.
set the Container model to relearn and set the default runtime rule to prevent for process protection.
C.
add a new runtime policy targeted at a specific Container name, add ransomWare process into the denied process list, and set the action to ג€preventג€.
D.
choose ג€copy into ruleג€ for the Container, add a ransomWare process into the denied process list, and set the action to ג€blockג€.
Prevent — Defender stops the process (and just the process) that violates your policy from executing.
Block — Defender stops the entire container if a process that violates your policy attempts to run.
D.
https://docs.prismacloud.io/en/classic/compute-admin-guide/runtime-defense/runtime-defense-containers#effect
D is the right option. Prevent only blocks containers from running processes, whereas the requirment is to terminate the container, which is only possible by Block. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/runtime_defense_containers
Option C is the correct answer. The administrator should add a new runtime policy targeted at a specific Container name, add the ransomWare process into the denied process list, and set the action to "prevent". This will prevent the ransomWare process from being executed in the Container image topSecret:latest.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
[Removed]
Highly Voted 2 years, 10 months agoPhoennix
1 year, 11 months agoelzm
Most Recent 1 day, 18 hours agoJohnOrtiz
1 month, 2 weeks agosteven_xie2
8 months, 1 week agoSpippolo
1 year, 1 month agokumar_57
1 year, 3 months agoShivam_ayir
1 year, 3 months agoNodummyIQ
1 year, 5 months ago