Palo Alto Networks PSE-PrismaCloud Exam Practice Test Instant Access

Question 1

A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

AGenerate a compliance report from the Compliance dashboard

BWrite an RQL query from the 'Investigate' tab.

CConfigure an Inventory report from the 'Alerts' tab

DOpen the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Answer : B, D

Question 2

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Aconfig where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

Bconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Cconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Dconfig where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Answer : B

Question 3

Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

ATraps

BPrisma SaaS

CAmazon Web Services WAF

DVM-Series firewalls

ESecurity Groups

Answer : A, C, D

Question 4

Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

AAWS CDN

BAWS NAT Gateway

CAWS ALB

DAWS NLB

Answer : A, C

Question 5

Which two statements are true about CloudFormation? (Choose two.)

ACloudFormation is a procedural configuration management tool.

BCloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CCloudFormation templates can be written in JSON or YAML

DCloudFormation is a declarative orchestration tool.

Answer : C, D

Question 6

The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

ADirect Connect

BFast Connect

CIPsecVPN

DExpressRoute
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Answer : C, D

Question 7

What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

AVM Monitoring

BExternal Dynamic List

CCFT Template

DXML API
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/use-dynamic-address-groups-in-policy

Answer : A, D

Palo Alto Networks System Engineer - Prisma Cloud Exam Practice Test