VCEdump

PSE-PRISMA-CLOUD Palo Alto Networks System Engineer Professional - Prisma Cloud

PDF question preview Back to product

Reading controls

Reader tools

Free demo

18 of 115 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice12

Multiple choice5

Drag & drop1

Palo Alto Networks · PSE-PRISMA-CLOUD

Free PSE-PRISMA-CLOUD Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Multiple choice

What are two business values of Cloud Code Security? (Choose two.)

A
consistent controls from build time to runtime
B
prebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects
C
support for multiple languages, runtimes and frameworks
D
continuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

Reveal answer details Close answer details

Correct answersA, D

Question 2

Drag & drop

DRAG DROP

Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Reveal answer details Close answer details

Question 3

Multiple choice

Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

A
iLB-as-next-hop
B
transit gateway and security VPC with VM-Series
C
traditional active/standby HA on VM-Series
D
transit VPC and security VPC with VM-Series

Reveal answer details Close answer details

Correct answersB, C

Question 4

Single choice

How is license utilization displayed within the Prisma Public Cloud interface?

A
navigate to the CLI and run show license command
B
navigate to General > Licensing
C
navigate to Dashboard > Asset Inventory
D
navigate to Settings (via the gear icon) > Licensing

Reveal answer details Close answer details

Correct answerD

Question 5

Single choice

What is required for an EC2 instance to access the internet directly from an AWS VPC?

A
Internet Gateway
B
Transit Gateway
C
Virtual Private Gateway
D
Customer Gateway

Reveal answer details Close answer details

Correct answerA

Question 6

Single choice

Which RQL string returns a list of all Azure virtual machines that are not currently running?

A
config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
B
config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
C
config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
D
config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"

Reveal answer details Close answer details

Correct answerB

Question 7

Single choice

An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.

What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

A
The image will pass the CI policy, but will be blocked by the deployed policy; therefore, it will not be
deployed.
B
The CI policy will fail the build; therefore, the image will not be deployed.
C
The image will be deployed successfully, and all vulnerabilities will be reported.
D
The image will be deployed successfully, but no vulnerabilities will be reported.

Reveal answer details Close answer details

Correct answerB

Question 8

Single choice

Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?

A
The thresholds can be set to informational, low, medium, high, and critical.
B
The alert threshold always has precedence over, and can be greater than, the block threshold.
C
The block threshold must always be equal to or greater than the alert threshold.
D
The block threshold always has precedence over, and can be less than, the alert threshold.

Reveal answer details Close answer details

Correct answerC

Question 9

Multiple choice

Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)

A
Cortex Data Lake
B
Cloud Storage buckets
C
Prisma Access Gateways
D
Compute Engine instance

Reveal answer details Close answer details

Correct answersA, B

Question 10

Single choice

What is a permanent public IP called on Amazon Web Services?

A
Reserved IP
B
PIP
C
EIP
D
Floating IP

Reveal answer details Close answer details

Correct answerC

Question 11

Single choice

What is the Palo Alto Networks default Prisma Cloud setting for Alert Disposition to reduce the number of false positives?

A
Conservative
B
Moderate
C
High
D
Aggressive

Reveal answer details Close answer details

Correct answerA

Question 12

Single choice

Which regulatory framework in Prisma Cloud measures compliance with European Union (EU) data privacy regulations in Amazon Web services (AWS) workloads?

A
General Data Protection Regulation (GDPR)
B
International Organization for Standardization (ISO) 27001
C
Payment Card Industry (PCI) Data Security Standard (DSS) 3.0
D
EU Data Protection Directive 95/46/EC

Reveal answer details Close answer details

Correct answerA

Question 13

Multiple choice

Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

A
Traps
B
Prisma SaaS
C
Amazon Web Services WAF
D
VM-Series firewalls
E
Security Groups

Reveal answer details Close answer details

Correct answersA, C, D

Question 14

Single choice

Which statement applies to vulnerability management policies?

A
Host and serverless rules support blocking, whereas container rules do not.
B
Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.
C
Policies for containers, hosts, and serverless functions are not separate.
D
Rules are evaluated in an undefined order.

Reveal answer details Close answer details

Correct answerB

Question 15

Multiple choice

Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

A
Serial Number
B
CPU ID
C
Auth Code
D
License Key
E
UUID

Reveal answer details Close answer details

Correct answersA, B, E

Question 16

Single choice

What does Infrastructure as Code (laC) collect to enable automation?

A
modern representation formats that describe and deploy infrastructure
B
orchestrated workflows to enable cross-functional teams to deploy infrastructure
C
images to easily replicate and manage infrastructure
D
infrastructure monitoring tool sets

Reveal answer details Close answer details

Correct answerA

Question 17

Single choice

How can you modify a range of dates default policy in Prisma Public Cloud?

A
Override the value and commit the configuration.
B
Clone the existing policy and change the value.
C
Manually create the RQL statement.
D
Click the Gear icon next to the policy name to open the Edit Policy dialog

Reveal answer details Close answer details

Correct answerB

Question 18

Single choice

Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

A
network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
B
network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
C
show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
D
network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

Reveal answer details Close answer details

Correct answerB

Explanation

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples
All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment). networkwheredest.publicnetwork IN ('Internet IPs','Suspicious IPs') AND bytes > 1000000000

Free PSE-PRISMA-CLOUD Exam Dumps Preview

Palo Alto Networks System Engineer Professional - Prisma Cloud

PREVIEW CONTENTS · 3 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14

QUESTION 15

QUESTION 16

QUESTION 17

QUESTION 18

VOL	TYPE	QUESTIONS
1	Single choice	12
2	Multiple choice	5
3	Drag & drop	1