Palo Alto Networks PSE-PrismaCloud Exam Questions Instant Access

Question 1

A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

AGenerate a compliance report from the Compliance dashboard

BWrite an RQL query from the 'Investigate' tab.

CConfigure an Inventory report from the 'Alerts' tab

DOpen the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Answer : B, D

Question 2

What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

AVM Monitoring

BExternal Dynamic List

CCFT Template

DXML API

Answer : A, D

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/use-dynamic-address-groups-in-policy

Question 3

Which RQL string returns a list of all Azure virtual machines that are not currently running?

Aconfig where api.name = 'azure-vm-list' AND json.rule = powerState = 'off'

Bconfig where api.name = 'azure-vm-list' AND json.rule = powerState does not contain 'running'

Cconfig where api.name = 'azure-vm-list' AND json.rule = powerState = 'running'

Dconfig where api.name = 'azure-vm-list' AND json.rule = powerState contains 'running'

Answer : B

Question 4

What is Prisma Public Cloud licensing based on?

Anumber of alerts generated

Bnumber of accounts onboarded

Cnumber of monitored workloads

Dvolume of flow logs consumed

Answer : C

Question 5

Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

AAllow Prisma Cloud to automatically optimize registry scans with version pattern matching.

BAllow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.

CExplicitly specify the Defender to do the job.

DExplicitly specify the predefined version pattern-matching algorithm.

Answer : A, B

Question 6

An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

A10.0.1.254

B10.0.2.1

C10.0.3.255

D10.0.3.1

Answer : D

Question 7

Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Answer : A

Palo Alto Networks System Engineer - Prisma Cloud PSE-PrismaCloud Exam Questions