Palo Alto Networks PSE-PrismaCloud Exam Practice Test Instant Access

Question 1

How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

ACreate an RQL config query to identify resources with the tag 'Private.'

BCreate an RQL network query to identify traffic from resources tagged 'Private.'

COpen the Asset Dashboard, filter on tags: and choose 'Private.'

DGenerate a CIS compliance report and review the 'Asset Summary.'

Answer : B

Question 2

A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

AGenerate a compliance report from the Compliance dashboard

BWrite an RQL query from the 'Investigate' tab.

CConfigure an Inventory report from the 'Alerts' tab

DOpen the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Answer : B, D

Question 3

Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

AGDPR

BEU Data Protection Directive 95/46/EC

CISO 27001

DPayment Card Industry 3.0

Answer : A

Question 4

Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

APalo Alto Networks provides full support if a valid support license is in place.

BSupport for the templates is available through Professional Services from Palo Alto Networks.

CUnless otherwise noted, these templates are released under an as-is. best effort support policy.

DThe author of the template provides full support as long as the PAN-OS version specific to the template is supported.

Answer : C

Question 5

Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Answer : A

Question 6

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Aconfig where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

Bconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Cconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Dconfig where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Answer : B

Question 7

Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

ATraps

BPrisma SaaS

CAmazon Web Services WAF

DVM-Series firewalls

ESecurity Groups

Answer : A, C, D

Palo Alto Networks System Engineer - Prisma Cloud Exam Practice Test