Free Palo Alto Networks PSE-Prisma-Pro-24 Study Guides Exam Questions and Answer
PSE-Prisma-Pro-24 Exam Dumps, PSE-Prisma-Pro-24 Practice Test Questions
NEW QUESTION # 26
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''
- A. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
- B. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
- C. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))
- D. network where dest.resource IN (resource where role = 'Database'}
Answer: A
NEW QUESTION # 27
Which pattern syntax will add all images to a trusted images rule within a registry?
- A. acme.com/myrepo/allimages:/*
- B. *.acme.com
- C. acme/*
- D. registry.acme.com/*
Answer: D
Explanation:
This pattern syntax will add all images within the specified registry (registry.acme.com) to a trusted images rule in Prisma Cloud. It ensures that any image from that registry is trusted by matching all images under that domain.
NEW QUESTION # 28
How can a range of dates in the Prisma Cloud default policy be modified?
- A. Clone the existing policy and change the value.
- B. Click the gear icon next to the policy name to open the "Edit Policy" dialog.
- C. Manually create the Resource Query Language (RQL) statement.
- D. Override the value and commit the configuration.
Answer: A
NEW QUESTION # 29
Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?
- A. Cloud Security Posture Management
- B. Cloud Network Security
- C. Cloud Identity Security
- D. Cloud Workload Protection (CWP)
Answer: D
NEW QUESTION # 30
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Both Source and Destination Checks are enabled
- B. Both Source and Destination Checks are disabled
- C. Source Check is enabled and Destination Check is disabled
- D. Source Check is disabled and Destination Check is enabled
Answer: B
Explanation:
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws
/use-case-secure-the-ec2-instances-in-the-aws-cloud
NEW QUESTION # 31
What does Prisma Cloud execute to change public cloud infrastructure when autoremediation is enabled?
- A. remote function calls to host agents
- B. third-party integration tools
- C. public cloud CLI commands
- D. local scripts to public cloud APIs
Answer: A
NEW QUESTION # 32
Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?
- A. distributed denial of service (DDoS)
- B. shoulder surfing
- C. cross-site scripting (XSS)
- D. credential stuffing
Answer: C
NEW QUESTION # 33
Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?
- A. Cloud Code Security
- B. Cloud Workload Protection (CWP)
- C. Cloud Network Security
- D. Cloud Identity Security
Answer: C
NEW QUESTION # 34
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudLog
- B. CloudWatch
- C. CloudEvent
- D. CIoudTrail
Answer: B,D
NEW QUESTION # 35
Which type of Prisma Cloud Enterprise alert supports autoremediation?
- A. config
- B. audit
- C. network
- D. anomaly
Answer: A
NEW QUESTION # 36
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. CPU ID
- B. UUID
- C. new Auth Code
- D. API Key
Answer: C,D
Explanation:
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade- the-vm-series-firewall/upgrade-the-vm-series-model
NEW QUESTION # 37
Which statement reflects the default vulnerability management policy?
- A. The default vulnerability policy rule has an alert threshold to critical.
- B. Prisma Cloud scans images in all containers immediately upon policy activation.
- C. Policy rule order has little impact on optimization.
- D. Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.
Answer: D
NEW QUESTION # 38
Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?
- A. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
- B. config from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true
- C. event from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
- D. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false
Answer: A
NEW QUESTION # 39
What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?
- A. Low
- B. High
- C. Baseline
- D. Thorough
Answer: B
NEW QUESTION # 40
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
Answer: B
NEW QUESTION # 41
Match the query type with its corresponding search
Answer:
Explanation:
Explanation:
network where,
event where,
config where
NEW QUESTION # 42
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi- tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active
/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. port address translation
- B. destination address translation
- C. source and destination address translation
- D. source address translation
Answer: D
NEW QUESTION # 43
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- A. Unusual user activity
- B. Account hijacking attempts
- C. Suspicious file activity
- D. Denial-of-service activity
- E. Excessive login failures
Answer: A,B,E
Explanation:
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html
NEW QUESTION # 44
......
Latest PSE-Prisma-Pro-24 Actual Free Exam Questions Updated 118 Questions: https://latestdumps.actual4exams.com/PSE-Prisma-Pro-24-real-braindumps.html