Free Practice Questions for Palo Alto Networks PSE-Prisma-Pro-24 Exam

Question 1

A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

AGenerate a compliance report from the Compliance dashboard

BWrite an RQL query from the 'Investigate' tab.

CConfigure an Inventory report from the 'Alerts' tab

DOpen the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Correct Answer: B. Write an RQL query from the 'Investigate' tab.; D. Open the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Question 2

Which two cloud providers provide egress load balancing? (Choose two.)

AMicrosoft Azure

BAlibaba Cloud

CAmazon Web Services

DOracle Cloud

Correct Answer: A. Microsoft Azure; C. Amazon Web Services

Question 3

Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

Aconfig from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false

Bevent from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

Cconfig from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

Dconfig from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true

Correct Answer: C. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

Question 4

How can all alerts related to "Amazon RDS" be quickly identified within the Prisma Cloud dashboard?

AGenerate a Center for Internet Security (CIS) compliance report and search for 'Amazon RDS' policy violations.

BView the alert data on the 'Asset Inventory' dashboard and filter on 'Amazon RDS.

CWithin the 'Alerts' tab. filter on 'Amazon RDS' as a service.

DCreate a custom Resource Query Language (RQL) configuration report.

Correct Answer: C. Within the 'Alerts' tab. filter on 'Amazon RDS' as a service.

Question 5

What subcommand invokes the Prisma Cloud Compute (PCC) edition image scanner?

A> twistcli images scan

B> twistcli project scan

C> twistcli scan projects

D> twistcli scan images

Correct Answer: A. > twistcli images scan

Question 6

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Aconfig where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

Bconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Cconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Dconfig where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Correct Answer: B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Question 7

The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.

How does Amazon Web Services achieve this integration?

ASNS

BSQS

CCodeDeploy

DLambda

Correct Answer: D. Lambda

Question 8

What are two benefits of Cloud Security Posture Management (CSPM) over other solutions? (Choose two.)

Aguaranteed proof of concept (POC) extensions beyond 30 days

Bnative integration of network, endpoint, and cloud data to stop attacks

Celimination of blind spots

Dproactive addressing of risks

Correct Answer: C. elimination of blind spots; D. proactive addressing of risks

Question 9

What occurs with the command twistcli when scanning images?

AIf options are listed after the image name; they will be ignored.

BIf option '--user' is used, it is mandatory to use option '--password.

CIf option '--address' is unspecified, all images are scanned.

DOption '--output-file' cannot be used in conjunction with option '--details.'

Correct Answer: B. If option '--user' is used, it is mandatory to use option '--password.

Question 10

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

Arun the PAN-OS CLI command: set system mgmt-interface-swap enable yes

Brun the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

Ccreate a bootstrap file that includes the mgmt-interface-swap command

Din the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Correct Answer: C. create a bootstrap file that includes the mgmt-interface-swap command; D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Explanation:

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for-google-internal-load-balancing.html