PSE-Prisma-Pro-24 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

A.VM-GCP
B.VM-100
C.VM-500
D.VM-300

正解:
Explanation:
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud.html

Question No : 2
Which three services can Google Cloud Security Scanner assess? (Choose three.)

A.Google Kubernetes Engine
B.BigQuery
C.Compute Engine
D.App Engine
E.Google Virtual Private Cloud

正解:

Question No : 3
Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

A.event where crud = 'delete’ AND subject = 'user1'
B.event where crud = 'delete'
C.event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'
D.event where subject = 'user1'

正解:

Question No : 4
What does Prisma Cloud execute to change public cloud infrastructure when auto remediation is enabled?

A.local scripts to public cloud APIs
B.remote function calls to host agents
C.third-party integration tools
D.public cloud CLI commands

正解:

Question No : 5
Match the logging service with its cloud provider.

正解:

Explanation:
AWS, Azure, GCP, Azure, AWS, GCP

Question No : 6
A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.
Which type of Resource Query Language (RQL) query would be used in this policy?

A.audit from
B.network from
C.event from
D.config from

正解:

Question No : 7
Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

A.Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = status == TERMINATED
B.Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = TERMINATED
C.Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = status contains TERMINATED
D.Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = is TERMINATED

正解:

Question No : 8
Which two statements are true about CloudFormation? (Choose two.)

A.CloudFormation is a procedural configuration management tool.
B.CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
C.CloudFormation templates can be written in JSON or YAML
D.CloudFormation is a declarative orchestration tool.

正解:

Question No : 9
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

A.Palo Alto Networks provides full support if a valid support license is in place.
B.Support for the templates is available through Professional Services from Palo Alto Networks.
C.Unless otherwise noted, these templates are released under an as-is. best effort support policy.
D.The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

正解:

Question No : 10
Which filter type is valid in Asset Explorer?

A.resource name
B.instance
C.cloud region
D.feature

正解:

Question No : 11
How can a range of dates in the Prisma Cloud default policy be modified?

A.Clone the existing policy and change the value.
B.Click the gear icon next to the policy name to open the "Edit Policy" dialog.
C.Manually create the Resource Query Language (RQL) statement.
D.Override the value and commit the configuration.

正解:

Question No : 12
Which statement applies to optimization of registry scans with version pattern matching?

A.It requires Linux images to rely on optimizing registry scans due to various Linux elements.
B.It is only necessary in registries with tens of thousands of repositories and millions of images.
C.It is best practice to always optimize registry scans for faster results.
D.It is rarely successful in the Windows Operating System (OS).

正解:

Question No : 13
An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.
What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

A.The image will pass the CI policy, but will be blocked by the deployed policy; therefore, it will not be deployed.
B.The CI policy will fail the build; therefore, the image will not be deployed.
C.The image will be deployed successfully, and all vulnerabilities will be reported.
D.The image will be deployed successfully, but no vulnerabilities will be reported.

正解:

Question No : 14
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

A.compliance where
B.network where
C.user where
D.config where
E.event where

正解:

Question No : 15
Which type of alert captures unusual user activity and excessive login failures?

A.Anomaly
B.Audit Event
C.Configuration
D.Network

正解:

Paloalto Networks PSE-Prisma-Pro-24 問題練習