PSE-PRISMACLOUD Exam Questions
115 real PSE-PRISMACLOUD exam questions with expert-verified answers and explanations. Page 1 of 3.
- Question #1Prisma Cloud Investigation and RQL
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
RQLEBS volumestag filteringconfig query - Question #2Cloud Security Services
Which three services can Google Cloud Security Scanner assess? (Choose three.)
Google Cloud Security ScannerGKEApp EngineCompute Engine - Question #3VM-Series NGFW Security Profiles
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profi...
Vulnerability Protection ProfileNGFWStrict Profilebest practices - Question #4Prisma Cloud Compliance and Governance
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
CIS Benchmarkcompliance frameworksPrisma Cloudgeneral best practices - Question #5VM-Series NGFW Deployment on Azure
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers). Which is a valid IP address to manage...
Azure VNetIP addressingsubnetsVM-Series management - Question #6VM-Series NGFW Deployment on GCP
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)
VM-Series GCPinterface swapbootstrap filemetadata key-value - Question #7Prisma Cloud Policy Management
How can you modify a range of dates default policy in Prisma Public Cloud?
Prisma Cloud policiespolicy managementclone policydefault policy - Question #8Cloud Network Security Concepts
What are three examples of outbound traffic flow? (Choose three.)
outbound trafficcloud networkingtraffic flowegress - Question #9Cloud Identity and Access Management
What is the scope of the Amazon Web Services 1AM Service?
AWS IAMglobal servicescopeidentity management - Question #10VM-Series NGFW Deployment on Azure
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
Azure StackVM-Seriesinbound trafficNAT appliance - Question #11Cloud Security Services Integration
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
AWS Inspectorhost vulnerabilityPrisma Cloud integrationcloud security services - Question #12VM-Series NGFW Licensing
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
VM-Series licensingBYOLPAYGAzure Marketplace - Question #13Prisma Cloud Licensing and Deployment
What is Prisma Public Cloud licensing based on?
Prisma Cloud licensingmonitored workloadssubscription model - Question #14VM-Series NGFW Security Profiles
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can...
DoS Protection ProfileVM-SeriesDDoS protectionsession limits - Question #15VM-Series NGFW Deployment on AWS
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW. Which compone...
AWS EC2NATaddress translationVM-Series NGFW - Question #16Prisma Cloud Investigation and RQL
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
RQLnetwork querytraffic analysisbytes threshold - Question #17VM-Series NGFW Deployment on Azure
Which cloud provider supports iLB-as-next-hop?
iLB-as-next-hopAzureinternal load balancerVM-Series routing - Question #18VM-Series NGFW Licensing
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
VM-Series GCPcapacity licenseVM-300GCP Marketplace - Question #19Cloud Network Connectivity
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
AWS Direct Connectroute advertisementvirtual gatewayBGP routing - Question #20VM-Series NGFW Deployment and Templates
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
VM-Series templatesGitHubsupport policyas-is best effort - Question #21Compliance and Governance
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
GDPRcompliance frameworksEU data privacyAWS workloads - Question #22Cloud Asset Management and Visibility
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud...
RQL queryasset inventoryAmazon RDSresource discovery - Question #23VM-Series Deployment and Licensing
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
VM-Series NGFWPAYG licensingcustomer support registrationserial number - Question #24Cloud Asset Management and Visibility
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
RQL queryresource taggingEC2 instancesnetwork query - Question #25VM-Series Deployment on Azure
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
VM-Series NGFWAzure Stackunsupported featuresbootstrapping - Question #26Cloud Concepts and Architecture
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?
infrastructure as codecloud service modelsIaCautomation - Question #27Network Security and Connectivity
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
IKE profilesVPN configurationvirtual gatewayon-premises NGFW - Question #28VM-Series Deployment on AWS
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results...
VM-Series NGFWmgmt-interface-swapAWS VPCPAN-OS CLI - Question #29Prisma Cloud Administration
How is license utilization displayed within the Prisma Public Cloud interface?
licensingPrisma Cloud UIsettings navigationlicense utilization - Question #30Alert Management and Investigation
How can all alerts related to "Amazon RDS" be quickly identified within the Prisma Cloud dashboard?
alertsAmazon RDSPrisma Cloud dashboardalert filtering - Question #31Cloud Security Posture Management (CSPM)
What are two benefits of Cloud Security Posture Management (CSPM) over other solutions? (Choose two.)
CSPMcloud security posture managementblind spotsrisk management - Question #32Cloud Investigation and RQL
Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?
RQLconfig queryAmazon RDSpublic IP address - Question #33Cloud Code Security
Which two template formats are supported by the Prisma Cloud infrastructure as code (laC) scan service? (Choose two.)
IaC scanningtemplate formatsARMYAML - Question #34Cloud Workload Protection (CWP)
Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?
vulnerability managementblock thresholdalert thresholdpolicy configuration - Question #35Prisma Cloud Data Sources and Integrations
Which two data sources are ingested by Prisma Cloud? (Choose two.)
data ingestionnetwork flow logscompute metadataPrisma Cloud sources - Question #36Cloud Network Security
Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?
Cloud Network Securitylateral movementinbound threatsoutbound traffic - Question #37Cloud Workload Protection (CWP)
Which statement applies to vulnerability management policies?
vulnerability managementpolicy rulescontainer securityhost security - Question #38Compliance and Governance
How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?
autoremediationpolicy violationPrisma Cloud Enterprisecloud infrastructure - Question #39Prisma Cloud Administration
How can a range of dates in the Prisma Cloud default policy be modified?
policy managementdefault policyRQLpolicy cloning - Question #40Cloud Asset Management and Visibility
What are the asset severity levels within Prisma Cloud asset inventory?
asset severityasset inventoryPrisma Cloudseverity levels - Question #41Workload Protection
Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?
WAASweb application securityXSSattack prevention - Question #42Workload Protection
Where can rules be configured and viewed to configure trusted images?
trusted imagescompliancePrisma Cloud navigationimage policy - Question #43Workload Protection
What occurs with the command twistcli when scanning images?
twistcliimage scanningCLI optionsauthentication - Question #44Workload Protection
Which statement applies to optimization of registry scans with version pattern matching?
registry scanningversion pattern matchingoptimizationimage scanning - Question #45Prisma Cloud Overview and Licensing
Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)
Prisma Cloud licensingresource typesEC2CloudFront - Question #46Workload Protection
Which statement reflects the default vulnerability management policy?
vulnerability managementdefault policyalert thresholdPrisma Cloud policy - Question #47Cloud Network Security
Which two cloud providers provide egress load balancing? (Choose two.)
egress load balancingcloud providersAzureAWS - Question #48Workload Protection
What are two valid image identifiers to designate trust? (Choose two.)
trusted imagesimage identifiersregistrytrusted publisher - Question #49Workload Protection
Which two deployment methods are supported for Prisma Cloud Compute (PCC) container Defenders? (Choose two.)
container Defendersdeployment methodsKubernetes DaemonSetGKE - Question #50Threat Detection and Anomaly Policies
What is the Palo Alto Networks default Prisma Cloud setting for Alert Disposition to reduce the number of false positives?
alert dispositionfalse positivesUEBAPrisma Cloud settings