Palo Alto Networks PSE-Prisma-Pro-24 Exam Questions Instant Access

Question 1

The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.

How does Amazon Web Services achieve this integration?

ASNS

BSQS

CCodeDeploy

DLambda

Answer : D

Question 2

Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

Aevent where crud = 'delete' AND subject = 'user1'

Bevent where crud = 'delete'

Cevent where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'

Devent where subject = 'user1'

Answer : C

Question 3

A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order

Which PAN-OS CLI command resolves this issue?

Aset system setting mgmt-interface-swap enable yes

Bset mgmt-interface settings swap yes

Cset mgmt-interface swap yes

Dset system setting mgmt-interface swap yes

Answer : A

Question 4

Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

ACreate alert rules.

BWhitelist IP addresses.

CConfigure User-ID.

DDefine enterprise settings.

Answer : D

Question 5

What is Prisma Public Cloud licensing based on?

Anumber of alerts generated

Bnumber of accounts onboarded

Cnumber of monitored workloads

Dvolume of flow logs consumed

Answer : C

Question 6

How can a range of dates in the Prisma Cloud default policy be modified?

AClone the existing policy and change the value.

BClick the gear icon next to the policy name to open the 'Edit Policy' dialog.

CManually create the Resource Query Language (RQL) statement.

DOverride the value and commit the configuration.

Answer : A

Question 7

Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

AConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = status == TERMINATED

BConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = TERMINATED

CConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = status contains TERMINATED

DConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = is TERMINATED

Answer : C

Palo Alto Networks System Engineer - Prisma Cloud Professional PSE-Prisma-Pro-24 Exam Questions