Free PSE-Prisma Cloud Sample Questions — Palo Alto Networks System Engineer Professional - Prisma Cloud

Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?

• A. The thresholds can be set to informational, low, medium, high, and critical
• B. The alert threshold always has precedence over, and can be greater than, the block threshold
• C. The block threshold must always be equal to or greater than the alert threshold
• D. The block threshold always has precedence over, and can be less than, the alert threshold

What happens in Prisma Cloud after Training Model Threshold or Alert Disposition is changed?

• A. Changes will take effect after a new learning phase of 30 days
• B. System will perform a reboot, deleting all past alerts
• C. Existing alerts and new alerts are regenerated based on the new setting
• D. New alerts are generated based on the new setting

How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?

• A. It inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found
• B. It makes changes after a policy violation has been identified in monitoring
• C. It locks all changes to public cloud infrastructure and stops any configuration changes without prior approval
• D. It uses machine learning (ML) to identify unusual changes to infrastructure

The following error is received when performing a manual twistcli scan on an image: sudo ./twistcli images scan -u bca208cf-26fa-43c6-ac6S-edbl840f8a5S -p 69s+DUqceuxndIF52mo4JDHlpLA-proxy:1.0 What is missing from the command?

• A. registry path for image name
• B. password
• C. console address
• D. username

Which Resource Query Language (RQL) query monitors all traffic from the internet and suspicious internet protocols (IPs) destined for Amazon Web Services (AWS) databases?

• A. network from vpc.flow_record where dest.resource IN ( resource where role = 'Database')
• B. network from vpc.flow_record where source.publicnetworк IN ( 'Suspicious IPs' , 'Internet IPs' ) and dest.resource IN ( resource where role IN ( 'LDAP' ) )
• C. network from vpc.flow_record where source. publicr.etwork IN ( 'Suspicious IPs' ) and dest.resource IN ( resource where role IN ( 'AWS RDS' , 'Database' ) )
• D. network from vpc.flow_record where source.publicnetwork IN ( 'Suspicious IPs' , 'Internet IPs' ) and dest.resource IN ( resource where role IN ( 'AWS RDS' , 'Database' ) )

Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

• A. Allow Prisma Cloud to automatically optimize registry scans with version pattern matching
• B. Allow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders
• C. Explicitly specify the Defender to do the job
• D. Explicitly specify the predefined version pattern-matching algorithm

What occurs with the command twistcli when scanning images?

• A. If options are listed after the image name, they will be ignored
• B. If option "--user" is used, it is mandatory to use option "--password."
• C. If option "--address" is unspecified, all images are scanned
• D. Option "--output-file" cannot be used in conjunction with option "--details."

Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

• A. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' and json.rule = publicIpAddress exists
• B. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' and json.rule = 0.0.0.0/0
• C. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' and json.rule = publiclyAccessible is true
• D. config from cloud.resource where api.name = 'aws-rds-describe-db-snapshots' and json.rule = publicIpAddress is true

Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?

• A. credential stuffing
• B. cross-site scripting (XSS)
• C. shoulder surfing
• D. distributed denial of service (DDoS)

Where can rules be configured and viewed to configure trusted images?

• A. Monitor > Compliance > Trusted Images
• B. Monitor > Compliance > Images
• C. Defend > Compliance > Trusted Images
• D. Defend > Compliance > Images

What subcommand invokes the Prisma Cloud Compute (PCC) edition image scanner?

• A. > twistcli images scan
• B. > twistcli project scan
• C. > twistcli scan projects
• D. > twistcli scan images

Which RQL query returns a list of all Azure virtual machines that are not currently running?

• A. config from cloud.resource where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
• B. config from cloud.resource where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
• C. config from cloud.resource where api.name = 'azure-vm-list* AND json.rule = powerState = "off"
• D. config from cloud.resource where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"

What are the asset severity levels within Prisma Cloud asset inventory?

• A. Low, Medium, and High
• B. Low, Medium, High, and Critical
• C. Informational, Low, Medium, and High
• D. Low, Medium, High, Severe, and Critical

Which two templates are supported by Cloud Code Security scan service? (Choose two.)

• A. Azure Resource Manager (ARM)
• B. Hyper Text Markup Language (HTML)
• C. GitHub
• D. Terraform

Which statement applies to optimization of registry scans with version pattern matching?

• A. It requires Linux images to rely on optimizing registry scans due to various Linux elements
• B. It is only necessary in registries with tens of thousands of repositories and millions of images
• C. It is best practice to always optimize registry scans for faster results
• D. It is rarely successful in the Windows Operating System (OS)