PSE-PRISMACLOUD Exam Questions
115 real PSE-PRISMACLOUD exam questions with expert-verified answers and explanations. Page 2 of 3.
- Question #51Workload Protection
The following error is received when performing a manual twistcli scan on an image: What is missing from the command?
twistcliimage scanningCLI syntaxregistry path - Question #52Workload Protection
Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)
trusted imagesrule effectsalertblock - Question #53Workload Protection
Under which operating systems (OSs) is twistcli supported?
twistcliOS supportplatform compatibilityCLI tool - Question #54Visibility and Compliance
Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)
asset inventoryoperational insightCortex Data Lakecloud storage - Question #55Workload Protection
Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)
registry scanningDefender poolversion pattern matchingscan configuration - Question #56Workload Protection
An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability manag...
CI/CD integrationvulnerability managementdeployment policyimage blocking - Question #57Visibility and Compliance
Which type of Prisma Cloud Enterprise alert supports autoremediation?
autoremediationconfig alertsalert typesPrisma Cloud policy - Question #58Threat Detection and Anomaly Policies
What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?
training model thresholdanomaly detectionPrisma Cloud settingsUEBA - Question #59Visibility and Compliance
Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?
RQLresource query languageAzure SQLtransparent data encryption - Question #60Workload Protection
Which pattern syntax will add all images to a trusted images rule within a registry?
trusted imageswildcard syntaxregistry patternimage rules - Question #61Prisma Cloud Policies and RQL
A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group. Which type of Res...
RQL query typesaudit eventscustom policysecurity groups - Question #62Prisma Cloud Asset Visibility
All Amazon Regional Database Service (RDS)-deployed resources and the regions in which they are deployed can be identified by prisma Cloud using which two methods? (Choose two.)
Amazon RDSasset inventoryRQL investigationcloud resources - Question #63Prisma Cloud Compliance
Which regulatory framework in Prisma Cloud measures compliance with European Union (EU) data privacy regulations in Amazon Web services (AWS) workloads?
GDPRcompliance frameworksdata privacyAWS - Question #64Prisma Cloud Threat Detection
Which two elements does Prisma Cloud monitor when analyzing for unusual user activity? (Choose two.)
UEBAuser behavior analyticsanomaly detectionuser activity monitoring - Question #65Prisma Cloud Policy and Remediation
What does Prisma Cloud execute to change public cloud infrastructure when autoremediation is enabled?
autoremediationcloud infrastructureremediation workflowsfunction calls - Question #66Prisma Cloud Compute Architecture
In which two ways can Prisma Cloud Compute (PCC) edition be installed? (Choose two.)
Prisma Cloud Computedeployment optionsPCC installationSaaS vs self-managed - Question #67Prisma Cloud RQL
Drag and Drop Question Match the query type with its corresponding search. Answer:
RQL query typesconfig queryevent querynetwork query - Question #68VM-Series Licensing
Drag and Drop Question A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL licen...
VM-Series licensingPAYG to BYOLAWS deploymentlicense management - Question #69Cloud Network Routing
Drag and Drop Question Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process. Answe...
BGP path selectionVirtual Gatewaydeterministic routingroute evaluation - Question #70Cloud Provider Logging
Drag and Drop Question Match the logging service with its cloud provider. Answer:
cloud logging servicesAWS CloudTrailAzure MonitorGCP Cloud Logging - Question #71Prisma Cloud Threat Detection
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?
UEBAenterprise settingsuser behavior analyticsPrisma Cloud configuration - Question #72Cloud Network Architecture
Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)
load balancer next hopoutbound connectionsGCPAzure - Question #73Prisma Cloud RQL
Which RQL string returns a list of all Azure virtual machines that are not currently running?
RQL config queryAzure VMJSON rule syntaxresource filtering - Question #74VM-Series High Availability
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
HA designAWS transit gatewayVM-Series NGFWoutbound traffic architecture - Question #75Prisma Cloud Threat Detection
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
anomaly policiespredefined policiesaccount hijackingunusual user activity - Question #76VM-Series AWS Deployment
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traf...
VM-SeriesAWS ENIsource/destination checktraffic forwarding - Question #77Google Cloud Platform Networking
Which Google Cloud Platform project shares its VPC networks with other projects?
GCP shared VPChost projectVPC networksproject roles - Question #78VM-Series Network Configuration
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple...
asymmetric routingsource NATtransit gatewayECMP VPN - Question #79VM-Series Licensing
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance? (Choose two.)
VM-Series BYOLlicense upgradeauth codeAPI key - Question #80Prisma Cloud Compliance
How can you create a custom compliance standard in Prisma Public Cloud?
custom compliance standardcompliance frameworkPrisma Cloud UI - Question #81Cloud Security Posture Management
Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?
RQL queriesevent queryGCP audit logsBigQuery - Question #82Cloud Security Posture Management
Which pillar of the Prisma Cloud platform allows cloud entitlements to be quickly audited and secured?
Prisma Cloud pillarscloud entitlementsCSPMidentity security - Question #83Cloud Security Posture Management
Which type of Resource Query Language (RQL) query is used to create a custom policy that looks for untagged resources?
RQL query typesconfig querycustom policyuntagged resources - Question #84Cloud Code Security
What are two business values of Cloud Code Security? (Choose two.)
Cloud Code Securitybuild-time controlsruntime protectionIaC scanning - Question #85Cloud Security Posture Management
Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?
RQL config queryGCE instancesjson.ruleresource state - Question #86Cloud Security Posture Management
Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?
RQL event queryCRUD operationsuser activitycloud type filter - Question #87Cloud Security Posture Management
Which Amazon Web Services (AWS) service supplies information for Prisma Cloud "event where" Resource Query Language (RQL) queries?
AWS loggingCloudTrailevent RQLaudit logs - Question #88Cloud Workload Protection
What subcommand invokes the Prisma Cloud Compute (PCC) edition image scanner?
twistcliimage scanningPrisma Cloud ComputeCLI commands - Question #89Cloud Workload Protection
Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?
Prisma Cloud pillarsCWPagentless scanningworkload protection - Question #90Cloud Network Security
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
VM-Series orchestrationDynamic Address GroupsAPI integrationservice providers - Question #91Cloud Network Security
Which change represents a VM-Series NGFW license transfer?
VM-Series licensingBYOLlicense transferVM-Series models - Question #92Cloud Network Security
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM- Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that...
GuardDuty integrationLambdaDynamic Address GroupVM-Series NGFW - Question #93Cloud Security Posture Management
What are two examples of Amazon Web Services logging services? (Choose two.)
AWS logging servicesCloudWatchCloudTrailaudit logging - Question #94Cloud Network Security
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
VM-Series deploymentAzure MarketplaceARM templatesNGFW deployment - Question #95Cloud Network Security
What is required for an EC2 instance to access the internet directly from an AWS VPC?
AWS networkingInternet GatewayVPCEC2 internet access - Question #96Cloud Network Security
What is a permanent public IP called on Amazon Web Services?
AWS networkingElastic IPpublic IPEIP - Question #97Cloud Code Security
Which two templates are supported by Cloud Code Security scan service? (Choose two.)
Cloud Code SecurityIaC scanningTerraformARM templates - Question #98Cloud Code Security
What does Infrastructure as Code (laC) collect to enable automation?
Infrastructure as Codeautomationresource descriptionIaC concepts - Question #99Cloud Security Posture Management
Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)
Prisma Cloud providersAzureOracle Cloudcloud support - Question #100Cloud Workload Protection
Which subcommand invokes the scan for images built with Jenkins in an OpenShift environment?
twistcliJenkinsOpenShiftimage scanning