How can you modify a range of dates default policy in Prisma Public Cloud?

Clone the existing policy and change the value.

Override the value and commit the configuration.

Clone the existing policy and change the value.

Manually create the RQL statement.

Click the Gear icon next to the policy name to open the Edit Policy dialog

What are three examples of outbound traffic flow? (Choose three.)

issue yum update command on an instance inside Amazon Web Services

issue apt-get install command on an instance inside Amazon Web Services

outgoing Prisma Public Cloud API calls

issue yum update command on an instance inside Amazon Web Services

Microsoft Windows inside Azure requesting a security patch

web server inside Amazon Web Services receiving web requests from internet

issue apt-get install command on an instance inside Amazon Web Services

outgoing Prisma Public Cloud API calls

What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

Public IP for the VM-Series NGFW

Which RQL string returns a list of all Azure virtual machines that are not currently running?

config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain 'running'

config where api.name = 'azure-vm-list' AND json.rule = powerState = 'off'

config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain 'running'

config where api.name = 'azure-vm-list' AND json.rule = powerState = 'running'

config where api.name = 'azure-vm-list' AND json.rule = powerState contains 'running'

Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

transit gateway and security VPC with VM-Series

traditional active/standby HA on VM-Series

transit gateway and security VPC with VM-Series

traditional active/standby HA on VM-Series

transit VPC and security VPC with VM-Series

Which two data sources are ingested by Prisma Cloud? (Choose two.)

metadata about compute resources' configuration

list of all database instances' tables

metadata about compute resources' configuration

Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?

Cloud Workload Protection (CWP)

Which statement applies to vulnerability management policies?

Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.

Host and serverless rules support blocking, whereas container rules do not.

Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.

Policies for containers, hosts, and serverless functions are not separate.

Rules are evaluated in an undefined order.

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.What must be configured on the firewall to avoid asymmetric routing?

destination address translation

source and destination address translation

can you create a custom compliance standard in Prisma Public Cloud?

From Compliance tab > Compliance Standards, click 'Add New.'

Generate a new Compliance Report.

Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

From Compliance tab, clone a default framework and customize.

From Compliance tab > Compliance Standards, click 'Add New.'

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Both Source and Destination Checks are disabled

Both Source and Destination Checks are enabled

Source Check is disabled and Destination Check is enabled

Source Check is enabled and Destination Check is disabled

In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

support for Dynamic Address Groups

Which change represents a VM-Series NGFW license transfer?

VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services

VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services

VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

through ARM Templates in the GitHub Repository

through Solution Templates in the Azure Marketplace

through ARM Templates in the GitHub Repository

through Solution Templates in the Azure Marketplace

through Expedition in the Customer Success Portal

through Iron Skillets in the GitHub Repository

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

network where dest.resource IN (resource where role = 'Database'}

network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Which two statements are true about CloudFormation? (Choose two.)

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

Which RQL string searches for all EBS volumes that do not have a 'DataClassification' tag?

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Palo Alto Networks PSE-PrismaCloud Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

create a bootstrap file that includes the mgmt-interface-swap command

in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Comment (0)

Palo Alto Networks PSE-PrismaCloud Practice Test 1

Question

Palo Alto Networks PSE-PrismaCloud Practice Tests

Practice Tests