PSE-Prisma-Pro-24問題集、Palo Alto Networks実際の試験問題

質問 1

Under which operating systems (OSs) is twistcli supported?

A. Linux, macOS, PAN-OS, and Windows

B. Windows only

C. Linux and Windows

D. Linux, macOS, and Windows

正解: D

質問 2

Which RQL string returns a list of all Azure virtual machines that are not currently running?

A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'

B. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"

C. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"

D. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"

正解: C

質問 3

Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

A. Unusual user activity

B. Excessive login failures

C. Denial-of-service activity

D. Account hijacking attempts

E. Suspicious file activity

正解: A,B,D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Match the query type with its corresponding search

正解:

Explanation:
network where,
event where,
config where

質問 5

Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

A. Network Address Translation (NAT) gateways

B. Security groups

C. CloudFront distributions

D. Elastic Compute Cloud (EC2) instances

正解: C,D

質問 6

What are two business values of Cloud Code Security? (Choose two.)

A. continuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

B. prebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects

C. consistent controls from build time to runtime

D. support for multiple languages, runtimes and frameworks

正解: A,C

質問 7

Which filter type is valid in Asset Explorer?

A. instance

B. resource name

C. cloud region

D. feature

正解: B

質問 8

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

B. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

C. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

D. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

正解: C

質問 9

Which statement applies to optimization of registry scans with version pattern matching?

A. It is best practice to always optimize registry scans for faster results.

B. It is only necessary in registries with tens of thousands of repositories and millions of images.

C. It is rarely successful in the Windows Operating System (OS).

D. It requires Linux images to rely on optimizing registry scans due to various Linux elements.

正解: B

質問 10

When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

A. Clone the predefined Strict Profile, with packet capture settings disabled

B. Clone the predefined Strict Profile, with packet capture settings enabled

C. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

D. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

正解: B

Palo Alto Networks System Engineer - Prisma Cloud Professional - PSE-Prisma-Pro-24 模擬練習