Get Certified Easily with Online PSE-Prisma-Pro-24 Dumps

Using Palo Alto Networks System Engineer - Prisma Cloud Professional PSE-Prisma-Pro-24 questions can help you build confidence as you prepare for the exam. By practicing with these PSE-Prisma-Pro-24 dumps questions, you will be better prepared and more confident when you take the actual exam. Besides, PSE-Prisma-Pro-24 exam dumps questions cover a wide range of topics that are relevant to the certification exam. By using PSE-Prisma-Pro-24 dumps questions, you will be able to ensure that you have a comprehensive understanding of the material covered on the exam. Practice free Paloalto Networks PSE-Prisma-Pro-24 exam dumps below.

Page 1 of 4

1. A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in.

What are two ways that Prisma Public Cloud can show the relevant information? (Choose two.)

Generate a compliance report from the Compliance dashboard

Write an RQL query from the "Investigate" tab.

Configure an Inventory report from the "Alerts" tab

Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.

 Loading...

2. Which type of Prisma Cloud Enterprise alert supports autoremediation?

network

audit

anomaly

config

 Loading...

3. Match the query type with its corresponding search

 Loading...

4. What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

through ARM Templates in the GitHub Repository

through Solution Templates in the Azure Marketplace

through Expedition in the Customer Success Portal

through Iron Skillets in the GitHub Repository

 Loading...

5. What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

create a bootstrap file that includes the mgmt-interface-swap command

in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

 Loading...

6. Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

event where crud = 'delete’ AND subject = 'user1'

event where crud = 'delete'

event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'

event where subject = 'user1'

 Loading...

7. What are three examples of outbound traffic flow? (Choose three.)

issue yum update command on an instance inside Amazon Web Services

Microsoft Windows inside Azure requesting a security patch

web server inside Amazon Web Services receiving web requests from internet

issue apt-get install command on an instance inside Amazon Web Services

outgoing Prisma Public Cloud API calls

 Loading...

8. What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?

Low

Thorough

High

Baseline

 Loading...

9. What happens in Prisma Cloud after Training Model Threshold or Alert Disposition is changed?

Changes will take effect after a new learning phase of 30 days.

System will perform a reboot, deleting all past alerts.

Existing alerts and new alerts are regenerated based on the new setting.

New alerts are generated based on the new setting.

 Loading...

10. Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

4

5

3

1

 Loading...

Page 2 of 4

11. Which two template formats are supported by the Prisma Cloud infrastructure as code (laC) scan service? (Choose two.)

ARM

XML

YAML

JSON

 Loading...

12. A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

Custom threat signature

Zone Protection Profile

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

 Loading...

13. Which statement applies to vulnerability management policies?

Host and serverless rules support blocking, whereas container rules do not.

Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.

Policies for containers, hosts, and serverless functions are not separate.

Rules are evaluated in an undefined order.

 Loading...

14. What are two examples of Amazon Web Services logging services? (Choose two.)

CloudLog

CloudEvent

CloudWatch

CIoudTrail

 Loading...

15. Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)

Deny

Alert

Block

Ignore

 Loading...

16. Which type of alert captures unusual user activity and excessive login failures?

Anomaly

Audit Event

Configuration

Network

 Loading...

17. Which two cloud providers provide egress load balancing? (Choose two.)

Microsoft Azure

Alibaba Cloud

Amazon Web Services

Oracle Cloud

 Loading...

18. In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

fully instrumented API

Aperture Orchestration Engine

VM Orchestration Policy Editor

support for Dynamic Address Groups

 Loading...

19. Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

Create alert rules.

Whitelist IP addresses.

Configure User-I

Define enterprise settings.

 Loading...

20. Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?

The thresholds can be set to informational, low, medium, high, and critical.

The alert threshold always has precedence over, and can be greater than, the block threshold.

The block threshold must always be equal to or greater than the alert threshold.

The block threshold always has precedence over, and can be less than, the alert threshold.

 Loading...

Page 3 of 4

21. Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?

Cloud Network Security

Cloud Security Posture Management

Cloud Identity Security

Cloud Workload Protection (CWP)

 Loading...

22. Which two data sources are ingested by Prisma Cloud? (Choose two.)

network flow logs

list of all database instances' tables

metadata about compute resources' configuration

Cortex Data Lake

 Loading...

23. Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

Elastic Compute Cloud (EC2) instances

Network Address Translation (NAT) gateways

CloudFront distributions

Security groups

 Loading...

24. 1.How can all alerts related to "Amazon RDS" be quickly identified within the Prisma Cloud dashboard?

Generate a Center for Internet Security (CIS) compliance report and search for "Amazon RDS" policy violations.

View the alert data on the "Asset Inventory" dashboard and filter on "Amazon RD

Within the "Alerts" tab. filter on "Amazon RDS" as a service.

Create a custom Resource Query Language (RQL) configuration report.

 Loading...

25. What are two valid image identifiers to designate trust? (Choose two.)

repo

trusted publisher

registry

base layer

 Loading...

26. Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

 Loading...

27. An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.

What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

The image will pass the CI policy, but will be blocked by the deployed policy; therefore, it will not be deployed.

The CI policy will fail the build; therefore, the image will not be deployed.

The image will be deployed successfully, and all vulnerabilities will be reported.

The image will be deployed successfully, but no vulnerabilities will be reported.

 Loading...

28. Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?

credential stuffing

cross-site scripting (XSS)

shoulder surfing

distributed denial of service (DDoS)

 Loading...

29. An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers).

Which is a valid IP address to manage the VM-Series NGFW?

10.0.1.254

10.0.2.1

10.0.3.255

10.0.3.1

 Loading...

30. An administrator deploys a VM-Series firewall into Amazon Web Services.

Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

security group

tags

elastic ip address

source/destination checking

 Loading...

Page 4 of 4

31. Which two elements does Prisma Cloud monitor when analyzing for unusual user activity? (Choose two.)

Operating System (OS)

browser

location

time

 Loading...

32. What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

VM-GCP

VM-100

VM-500

VM-300

 Loading...

33. Which filter type is valid in Asset Explorer?

resource name

instance

cloud region

feature

 Loading...

34. What does Infrastructure as Code (laC) collect to enable automation?

modern representation formats that describe and deploy infrastructure

orchestrated workflows to enable cross-functional teams to deploy infrastructure

images to easily replicate and manage infrastructure

infrastructure monitoring tool sets

 Loading...

35. Which subcommand invokes the scan for images built with Jenkins in an OpenShift environment?

> twistcli project scan

> twistcli scar, projects

> twistcli hosts scan

> twistcli scar, hosts

 Loading...

 Loading...