Palo Alto Networks PSE-Prisma-Pro-24 Exam Questions Instant Access

Question 1

Under which operating systems (OSs) is twistcli supported?

ALinux, macOS, and Windows

BWindows only

CLinux and Windows

DLinux, macOS, PAN-OS, and Windows

Answer : A

Question 2

Which change represents a VM-Series NGFW license transfer?

AVM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services

BVM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services

CVM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

DVM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

Answer : C

Question 3

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

Arun the PAN-OS CLI command: set system mgmt-interface-swap enable yes

Brun the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

Ccreate a bootstrap file that includes the mgmt-interface-swap command

Din the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Answer : C, D

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for-google-internal-load-balancing.html

Question 4

Which two statements are true about CloudFormation? (Choose two.)

ACloudFormation is a procedural configuration management tool.

BCloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CCloudFormation templates can be written in JSON or YAML

DCloudFormation is a declarative orchestration tool.

Answer : C, D

Question 5

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Answer : D

Question 6

When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

AUse the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

BClone the predefined Strict Profile, with packet capture settings disabled

CUse the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

DClone the predefined Strict Profile, with packet capture settings enabled

Answer : D

Question 7

How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?

AIt inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found.

BIt makes changes after a policy violation has been identified in monitoring.

CIt locks all changes to public cloud infrastructure and stops any configuration changes without prior approval.

DIt uses machine learning (ML) to identify unusual changes to infrastructure.

Answer : B

Palo Alto Networks System Engineer - Prisma Cloud Professional PSE-Prisma-Pro-24 Exam Questions