How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

launch a new VM using the PAYG image

purchase a new PAYG license from a reseller

go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

launch a new VM using the PAYG image

A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

DoS Protection Profile with specific session counts

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.Which component handles address translation?

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

EU Data Protection Directive 95/46/EC

A customer CSO has asked you to demonstrate how to identify all 'Amazon RDS' resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

Write an RQL query from the 'Investigate' tab.

Open the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Generate a compliance report from the Compliance dashboard

Write an RQL query from the 'Investigate' tab.

Configure an Inventory report from the 'Alerts' tab

Open the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as 'Private?

Create an RQL network query to identify traffic from resources tagged 'Private.'

Create an RQL config query to identify resources with the tag 'Private.'

Create an RQL network query to identify traffic from resources tagged 'Private.'

Open the Asset Dashboard, filter on tags: and choose 'Private.'

Generate a CIS compliance report and review the 'Asset Summary.'

When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group14 / SHA-256 / AES-256-CBC / IKE-V1

Group2 / SHA-1 / AES-128-CBC / IKE-V1

Group2 / SHA-1 / AES-128-GCM / IKE-V1

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group14 / SHA-256 / AES-256-CBC / IKE-V1

A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect orderWhich PAN-OS CLI command resolves this issue?

set system setting mgmt-interface-swap enable yes

set mgmt-interface settings swap yes

set system setting mgmt-interface swap yes

How is license utilization displayed within the Prisma Public Cloud interface?

navigate to Settings (via the gear icon) > Licensing

navigate to the CLI and run show license command

navigate to General > Licensing

navigate to Dashboard > Asset Inventory

navigate to Settings (via the gear icon) > Licensing

How can all alerts related to 'Amazon RDS' be quickly identified within the Prisma Cloud dashboard?

Within the 'Alerts' tab. filter on 'Amazon RDS' as a service.

Generate a Center for Internet Security (CIS) compliance report and search for 'Amazon RDS' policy violations.

View the alert data on the 'Asset Inventory' dashboard and filter on 'Amazon RDS.

Within the 'Alerts' tab. filter on 'Amazon RDS' as a service.

Create a custom Resource Query Language (RQL) configuration report.

What are two benefits of Cloud Security Posture Management (CSPM) over other solutions? (Choose two.)

guaranteed proof of concept (POC) extensions beyond 30 days

native integration of network, endpoint, and cloud data to stop attacks

Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false

event from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

config from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true

Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?

The block threshold must always be equal to or greater than the alert threshold.

The thresholds can be set to informational, low, medium, high, and critical.

The alert threshold always has precedence over, and can be greater than, the block threshold.

The block threshold must always be equal to or greater than the alert threshold.

The block threshold always has precedence over, and can be less than, the alert threshold.

Which two templates are supported by Cloud Code Security scan service? (Choose two.)

Hyper Text Markup Language (HTML)

What does Infrastructure as Code (laC) collect to enable automation?

modern representation formats that describe and deploy infrastructure

orchestrated workflows to enable cross-functional teams to deploy infrastructure

images to easily replicate and manage infrastructure

infrastructure monitoring tool sets

Which statement is specific for Prisma Cloud when integrating into cloud environments?

No agents or proxies are required.

An AutoFocus license is included in Prisma Cloud.

For multi-cloud environment licenses are required for the number of Prisma Cloud instances.

Can be natively integrated into Prisma Access.

No agents or proxies are required.

What happens in Prisma Cloud after Training Model Threshold or Alert Disposition is changed?

Existing alerts and new alerts are regenerated based on the new setting.

Changes will take effect after a new learning phase of 30 days.

System will perform a reboot, deleting all past alerts.

Existing alerts and new alerts are regenerated based on the new setting.

New alerts are generated based on the new setting.

How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?

It makes changes after a policy violation has been identified in monitoring.

It inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found.

It makes changes after a policy violation has been identified in monitoring.

It locks all changes to public cloud infrastructure and stops any configuration changes without prior approval.

It uses machine learning (ML) to identify unusual changes to infrastructure.

How can a range of dates in the Prisma Cloud default policy be modified?

Clone the existing policy and change the value.

Click the gear icon next to the policy name to open the 'Edit Policy' dialog.

Manually create the Resource Query Language (RQL) statement.

Override the value and commit the configuration.

What are the asset severity levels within Prisma Cloud asset inventory?

Low, Medium, High, and Critical

Informational, Low, Medium, and High

Low, Medium, High, Severe, and Critical

Palo Alto Networks PSE-PrismaCloud Practice Test 2 - Free Online Exam Questions 41-80

When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PSE-PrismaCloud Practice Test 2

Question

Palo Alto Networks PSE-PrismaCloud Practice Tests

Practice Tests