Palo Alto Networks PSE-PrismaCloud Exam Questions Instant Access

Question 1

What does Infrastructure as Code (laC) collect to enable automation?

Amodern representation formats that describe and deploy infrastructure

Borchestrated workflows to enable cross-functional teams to deploy infrastructure

Cimages to easily replicate and manage infrastructure

Dinfrastructure monitoring tool sets

Answer : A

Question 2

What occurs with the command twistcli when scanning images?

AIf options are listed after the image name; they will be ignored.

BIf option '--user' is used, it is mandatory to use option '--password.

CIf option '--address' is unspecified, all images are scanned.

DOption '--output-file' cannot be used in conjunction with option '--details.'

Answer : B

Question 3

What are two business values of Cloud Code Security? (Choose two.)

Aconsistent controls from build time to runtime

Bprebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects

Csupport for multiple languages, runtimes and frameworks

Dcontinuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

Answer : A, D

Question 4

Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

AShield

BInspector

CGuardDuty

DAmazon Web Services WAF

Answer : B

Question 5

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Answer : D

Question 6

Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

AConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = status == TERMINATED

BConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = TERMINATED

CConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = status contains TERMINATED

DConfig from.cloud.resource where api.name = gcloud-compute-instance-list' and json.rule = is TERMINATED

Answer : C

Question 7

Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

Aconfig from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = is TERMINATED

Bconfig from cloud.resource where api.name = 'gcloud-compute-instances-list' = TERMINATED

Cconfig from cloud.resource where api.name = 'gcloud-compute-instances-list* and json.rule == status TERMINATED

Dconfig from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = status contains TERMINATED

Answer : A

Palo Alto Networks System Engineer - Prisma Cloud PSE-PrismaCloud Exam Questions