PSE-Prisma-Pro-24 Actual Questions Answers PDF 100% Cover Real Exam Questions [Q21-Q41]

5/5 - (1 vote)

PSE-Prisma-Pro-24 Actual Questions Answers PDF 100% Cover Real Exam Questions

PSE-Prisma-Pro-24 Exam questions and answers

NO.21 Where can rules be configured and viewed to configure trusted images?

Monitor > Compliance > Trusted Images

Monitor > Compliance > Images

Defend > Compliance > Trusted Images

Defend > Compliance > Images

NO.22 When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings disabled

Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings enabled

NO.23 Which statement reflects the default vulnerability management policy?

Policy rule order has little impact on optimization.

Prisma Cloud scans images in all containers immediately upon policy activation.

The default vulnerability policy rule has an alert threshold to critical.

Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.

NO.24 How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as “Private?

Create an RQL config query to identify resources with the tag “Private.”

Create an RQL network query to identify traffic from resources tagged “Private.”

Open the Asset Dashboard, filter on tags: and choose “Private.”

Generate a CIS compliance report and review the “Asset Summary.”

NO.25 What are three examples of outbound traffic flow? (Choose three.)

issue yum update command on an instance inside Amazon Web Services

Microsoft Windows inside Azure requesting a security patch

web server inside Amazon Web Services receiving web requests from internet

issue apt-get install command on an instance inside Amazon Web Services

outgoing Prisma Public Cloud API calls

NO.26 When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Group2 / SHA-1 / AES-128-CBC / IKE-V1

Group2 / SHA-1 / AES-128-GCM / IKE-V1

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group2 / SHA-1 / AES-128-CBC

Group14 / SHA-256 / AES-256-CBC / IKE-V1

NO.27 Which Amazon Web Services (AWS) service supplies information for Prisma Cloud “event where” Resource Query Language (RQL) queries?

GuardDuty

CloudTrail Audit Logs

Activity Logs

Inspector

NO.28 What is Prisma Public Cloud licensing based on?

number of alerts generated

number of accounts onboarded

number of monitored workloads

volume of flow logs consumed

NO.29 Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

platform as a service

infrastructure as a service

software as code

infrastructure as code

NO.30 A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.
Which type of Resource Query Language (RQL) query would be used in this policy?

audit from

network from

event from

config from

NO.31 Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases”

network where source.publicnetwork IN (‘Suspicious IPs’) and dest.resource IN (resource where role IN (‘AWS RDS’, ‘Database’))

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest.resource IN (resource where role IN (‘LDAP’))

network where dest.resource IN (resource where role = ‘Database’}

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest resource IN (resource where role IN (‘AWS RDS’. ‘Database’))

NO.32 Which two types of Resource Query Language (RQL) queries can be used to create policies? (Choose two.)

hose from

network from

system from

event from

NO.33 Under which operating systems (OSs) is twistcli supported?

Linux, macOS, and Windows

Windows only

Linux and Windows

Linux, macOS, PAN-OS, and Windows

NO.34 What is required for an EC2 instance to access the internet directly from an AWS VPC?

Internet Gateway

Transit Gateway

Virtual Private Gateway

Customer Gateway

NO.35 Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

UUID

new Auth Code

CPU ID

API Key

In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade- the-vm-series-firewall/upgrade-the-vm-series-model

NO.36 An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi- tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active
/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

source address translation

destination address translation

port address translation

source and destination address translation

NO.37 Match the query type with its corresponding search

Explanation:
network where,
event where,
config where

NO.38 Match the logging service with its cloud provider.

Explanation:
AWS, Azure, GCP, Azure, AWS, GCP

NO.39 All Amazon Regional Database Service (RDS)-deployed resources and the regions in which they are deployed can be identified by prisma Cloud using which two methods? (Choose two.)

Configure an Inventory report from the “Alerts” tab.

Write an RQL query from the “Investigate” tab.

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

Generate a compliance report from the Compliance dashboard.

NO.40 Which two cloud providers provide egress load balancing? (Choose two.)

Microsoft Azure

Alibaba Cloud

Amazon Web Services

Oracle Cloud

NO.41 How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?

It inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found.

It makes changes after a policy violation has been identified in monitoring.