Palo Alto Networks PSE-PrismaCloud Exam Questions Instant Access

Question 1

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Answer : D

Question 2

Which two deployment methods are supported for Prisma Cloud Compute (PCC) container Defenders? (Choose two.)

AAzure SQL database instances

BGoogle Kubernetes Engine

COracle Functions service

DKubernetes DaemonSet

Answer : B, D

Question 3

What are two business values of Cloud Code Security? (Choose two.)

Aconsistent controls from build time to runtime

Bprebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects

Csupport for multiple languages, runtimes and frameworks

Dcontinuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

Answer : A, D

Question 4

Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

ACreate alert rules.

BWhitelist IP addresses.

CConfigure User-ID.

DDefine enterprise settings.

Answer : D

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html

Question 5

Which cloud provider supports iLB-as-next-hop?

AMicrosoft Azure

BAlibaba Cloud

COracle Cloud

DAmazon Web Services

Answer : A

Question 6

Which RQL string returns a list of all Azure virtual machines that are not currently running?

Aconfig where api.name = 'azure-vm-list' AND json.rule = powerState = 'off'

Bconfig where api.name = 'azure-vm-list' AND json.rule = powerState does not contain 'running'

Cconfig where api.name = 'azure-vm-list' AND json.rule = powerState = 'running'

Dconfig where api.name = 'azure-vm-list' AND json.rule = powerState contains 'running'

Answer : B

Question 7

Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

Aconfig from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false

Bevent from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

Cconfig from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

Dconfig from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true

Answer : C

Palo Alto Networks System Engineer - Prisma Cloud PSE-PrismaCloud Exam Questions