PSE-PrismaCloud Practice Questions

A.  

Palo Alto Networks provides full support if a valid support license is in place.

B.  

Support for the templates is available through Professional Services from Palo Alto Networks.

C.  

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

D.  

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

A.  

platform as a service

B.  

infrastructure as a service

C.  

software as code

D.  

infrastructure as code

A.  

issue yum update command on an instance inside Amazon Web Services

B.  

Microsoft Windows inside Azure requesting a security patch

C.  

web server inside Amazon Web Services receiving web requests from internet

D.  

issue apt-get install command on an instance inside Amazon Web Services

E.  

outgoing Prisma Public Cloud API calls

A.  

network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

B.  

network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

C.  

show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

D.  

network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

A.  

compliance where

B.  

network where

C.  

user where

D.  

config where

E.  

event where

A.  

Shield

B.  

Inspector

C.  

GuardDuty

D.  

Amazon Web Services WAF

A.  

Generate a new Compliance Report.

B.  

Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

C.  

From Compliance tab, clone a default framework and customize.

D.  

From Compliance tab > Compliance Standards, click "Add New."

A.  

10.0.1.254

B.  

10.0.2.1

C.  

10.0.3.255

D.  

10.0.3.1

A.  

network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

B.  

network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

C.  

network where dest.resource IN (resource where role = 'Database'}

D.  

network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))