Latest Palo Alto Networks PSE-Prisma-Pro-24 Exam questions and answers [Q15-Q35]

Rate this post

Latest Palo Alto Networks PSE-Prisma-Pro-24 Exam questions and answers

Real4Prep PSE-Prisma-Pro-24 Exam Practice Test Questions (Updated 118 Questions)

Q15. Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

RQL queries

alert rules

notification templates

policies

Q16. What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

VM Monitoring

External Dynamic List

CFT Template

XML API

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual- environment/use-dynamic-address-groups-in-policy

Q17. When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Group2 / SHA-1 / AES-128-CBC / IKE-V1

Group2 / SHA-1 / AES-128-GCM / IKE-V1

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group2 / SHA-1 / AES-128-CBC

Group14 / SHA-256 / AES-256-CBC / IKE-V1

Q18. Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases”

network where source.publicnetwork IN (‘Suspicious IPs’) and dest.resource IN (resource where role IN (‘AWS RDS’, ‘Database’))

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest.resource IN (resource where role IN (‘LDAP’))

network where dest.resource IN (resource where role = ‘Database’}

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest resource IN (resource where role IN (‘AWS RDS’. ‘Database’))

Q19. Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Explanation:
longest, shortest, path, lowest multi, lowest peer

Q20. What does Prisma Cloud execute to change public cloud infrastructure when autoremediation is enabled?

local scripts to public cloud APIs

remote function calls to host agents

third-party integration tools

public cloud CLI commands

Q21. Which Resource Query Language (RQL) query monitors all “delete” activities for the user “user1”?

event where crud = ‘delete’ AND subject = ‘user1’ AND cloud.type = ‘aws’

event where crud = ‘delete’

event where subject = ‘user1’

event where crud = ‘delete’ AND subject = ‘user1’

Q22. Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

GDPR

EU Data Protection Directive 95/46/EC

ISO 27001

Payment Card Industry 3.0

Q23. The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

SNS

SQS

CodeDeploy

Lambda

Q24. Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)

Cortex Data Lake

Cloud Storage buckets

Prisma Access Gateways

Compute Engine instance

Q25. Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

Azure Application Insight

Resource Group

Azure Security Center

Bootstrapping

ARM Template

Q26. Which Google Cloud Platform project shares its VPC networks with other projects?

Service project

Host project

Admin project

Subscribing project

Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on- google-cloud-platform/autoscaling-on-google-cloud-platform/deploy-autoscaling-on-google-cloud.html

Q27. What are two benefits of Cloud Security Posture Management (CSPM) over other solutions? (Choose two.)

guaranteed proof of concept (POC) extensions beyond 30 days

native integration of network, endpoint, and cloud data to stop attacks

elimination of blind spots

proactive addressing of risks

Q28. Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

UUID

new Auth Code

CPU ID

API Key

In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade- the-vm-series-firewall/upgrade-the-vm-series-model

Q29. Which RQL query should be used to quickly identify any events related to an organization’s Google Cloud Platform Big Query database the last 24 hours?

event from cloud.audit_logs where cloud.type = ‘gcp’ AND cloud.service = ‘Google Bigtable Instance’

event from cloud.audit_logs where cloud.type = ‘gcp’ AND cloud.service = ‘cloudsql.googleapis.com’

event from cloud.audit_logs where cloud.type = ‘gcp’ AND cloud.service = ‘bigquery.googleapis.com’

event from cloud.audit_logs where cloud.type = ‘gcp’ AND cloud.service = ‘dataproc.googleapis.com’

Q30. What is required for an EC2 instance to access the internet directly from an AWS VPC?

Internet Gateway

Transit Gateway

Virtual Private Gateway

Customer Gateway

Q31. Which Prisma Public Cloud policy alerts administrators to unusual user activity?

Anomaly

Audit Event

Network

Configuration

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html

Q32. In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

fully instrumented API

Aperture Orchestration Engine

VM Orchestration Policy Editor

support for Dynamic Address Groups

Q33. All Amazon Regional Database Service (RDS)-deployed resources and the regions in which they are deployed can be identified by prisma Cloud using which two methods? (Choose two.)

Configure an Inventory report from the “Alerts” tab.

Write an RQL query from the “Investigate” tab.

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

Generate a compliance report from the Compliance dashboard.

Q34. Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

Q35. Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?