Paloalto Networks PSE-Prisma-Pro-24 Exam Questions Free Practice Test

Viewing page 3 out of 4 pages

Viewing questions 21-30 out of questions

Questions # 21:

What does Prisma Cloud execute to change public cloud infrastructure when autoremediation is enabled?

Options:

local scripts to public cloud APIs

remote function calls to host agents

third-party integration tools

public cloud CLI commands

Expert Solution

Questions # 22:

Which statement applies to vulnerability management policies?

Options:

Host and serverless rules support blocking, whereas container rules do not.

Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.

Policies for containers, hosts, and serverless functions are not separate.

Rules are evaluated in an undefined order.

Expert Solution

Questions # 23:

What are two business values of Cloud Code Security? (Choose two.)

Options:

consistent controls from build time to runtime

prebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects

support for multiple languages, runtimes and frameworks

continuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

Expert Solution

Questions # 24:

The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.

Which component handles address translation?

Options:

The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

Expert Solution

Questions # 25:

Which type of Prisma Cloud Enterprise alert supports autoremediation?

Options:

network

audit

anomaly

config

Expert Solution

Questions # 26:

Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

Options:

config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false

event from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

config from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true

Expert Solution

Questions # 27:

Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Options:

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

Expert Solution

Questions # 28:

What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?

Options:

Low

Thorough

High

Baseline

Expert Solution

Questions # 29:

Which two statements are true about CloudFormation? (Choose two.)

Options:

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

Expert Solution

Questions # 30:

A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order

Which PAN-OS CLI command resolves this issue?

Options:

set system setting mgmt-interface-swap enable yes

set mgmt-interface settings swap yes

set mgmt-interface swap yes

set system setting mgmt-interface swap yes

Expert Solution

Viewing page 3 out of 4 pages

Viewing questions 21-30 out of questions

Pass the Paloalto Networks PSE-Prisma Cloud Professional PSE-Prisma-Pro-24 Questions and answers with CertsForce