Free Practice Questions for Palo Alto Networks PSE-PrismaCloud Exam

Question 1

Which type of alert captures unusual user activity and excessive login failures?

AAnomaly

BAudit Event

CConfiguration

DNetwork

Correct Answer: A. Anomaly

Question 2

Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?

Acredential stuffing

Bcross-site scripting (XSS)

Cshoulder surfing

Ddistributed denial of service (DDoS)

Correct Answer: B. cross-site scripting (XSS)

Question 3

Which three services can Google Cloud Security Scanner assess? (Choose three.)

AGoogle Kubernetes Engine

BBigQuery

CCompute Engine

DApp Engine

EGoogle Virtual Private Cloud

Correct Answer: A. Google Kubernetes Engine; C. Compute Engine; D. App Engine

Question 4

Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

AAllow Prisma Cloud to automatically optimize registry scans with version pattern matching.

BAllow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.

CExplicitly specify the Defender to do the job.

DExplicitly specify the predefined version pattern-matching algorithm.

Correct Answer: A. Allow Prisma Cloud to automatically optimize registry scans with version pattern matching.; B. Allow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.

Question 5

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Aconfig where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

Bconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Cconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Dconfig where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Correct Answer: B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Question 6

Which two deployment methods are supported for Prisma Cloud Compute (PCC) container Defenders? (Choose two.)

AAzure SQL database instances

BGoogle Kubernetes Engine

COracle Functions service

DKubernetes DaemonSet

Correct Answer: B. Google Kubernetes Engine; D. Kubernetes DaemonSet

Question 7

Which pattern syntax will add all images to a trusted images rule within a registry?

A*.acme.com

Bacme/*

Cacme.com/myrepo/allimages:/*

Dregistry.acme.com/*

Correct Answer: D. registry.acme.com/*

Explanation:

This pattern syntax will add all images within the specified registry (registry.acme.com) to a trusted images rule in Prisma Cloud. It ensures that any image from that registry is trusted by matching all images under that domain.

Question 8

The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

ADirect Connect

BFast Connect

CIPsecVPN

DExpressRoute

Correct Answer: C. IPsecVPN; D. ExpressRoute

Explanation:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Question 9

Which subcommand invokes the scan for images built with Jenkins in an OpenShift environment?

A> twistcli project scan

B> twistcli scar, projects

C> twistcli hosts scan

D> twistcli scar, hosts

Correct Answer: A. > twistcli project scan

Question 10

Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)

AGoogle Cloud Platform

BMicrosoft Azure

COracle Cloud

DAmazon Web Services

Correct Answer: A. Google Cloud Platform; B. Microsoft Azure