Latest PSE-Prisma-Pro-24 Study Guides 2026 - With Test Engine PDF
Get New PSE-Prisma-Pro-24 Practice Test Questions Answers
NEW QUESTION # 37
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?
- A. set mgmt-interface settings swap yes
- B. set mgmt-interface swap yes
- C. set system setting mgmt-interface swap yes
- D. set system setting mgmt-interface-swap enable yes
Answer: D
NEW QUESTION # 38
How can all alerts related to "Amazon RDS" be quickly identified within the Prisma Cloud dashboard?
- A. View the alert data on the "Asset Inventory" dashboard and filter on "Amazon RDS.
- B. Within the "Alerts" tab. filter on "Amazon RDS" as a service.
- C. Generate a Center for Internet Security (CIS) compliance report and search for "Amazon RDS" policy violations.
- D. Create a custom Resource Query Language (RQL) configuration report.
Answer: B
NEW QUESTION # 39
Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?
- A. event where crud = 'delete'
- B. event where subject = 'user1'
- C. event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'
- D. event where crud = 'delete' AND subject = 'user1'
Answer: C
NEW QUESTION # 40
What is the scope of the Amazon Web Services 1AM Service?
- A. VPC
- B. zonal
- C. global
- D. regional
Answer: C
NEW QUESTION # 41
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- B. Palo Alto Networks provides full support if a valid support license is in place.
- C. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- D. Support for the templates is available through Professional Services from Palo Alto Networks.
Answer: A
NEW QUESTION # 42
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)
- A. Microsoft Azure
- B. Amazon Web Services
- C. Google Cloud Platform
- D. Oracle Cloud
Answer: A,C
NEW QUESTION # 43
Which two cloud providers provide egress load balancing? (Choose two.)
- A. Microsoft Azure
- B. Alibaba Cloud
- C. Amazon Web Services
- D. Oracle Cloud
Answer: A,C
NEW QUESTION # 44
Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?
- A. The block threshold always has precedence over, and can be less than, the alert threshold.
- B. The thresholds can be set to informational, low, medium, high, and critical.
- C. The alert threshold always has precedence over, and can be greater than, the block threshold.
- D. The block threshold must always be equal to or greater than the alert threshold.
Answer: D
NEW QUESTION # 45
All Amazon Regional Database Service (RDS)-deployed resources and the regions in which they are deployed can be identified by prisma Cloud using which two methods? (Choose two.)
- A. Write an RQL query from the "Investigate" tab.
- B. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- C. Configure an Inventory report from the "Alerts" tab.
- D. Generate a compliance report from the Compliance dashboard.
Answer: A,B
NEW QUESTION # 46
Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?
- A. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'dataproc.googleapis.com'
- B. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'Google Bigtable Instance'
- C. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'bigquery.googleapis.com'
- D. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'cloudsql.googleapis.com'
Answer: C
NEW QUESTION # 47
What does Infrastructure as Code (laC) collect to enable automation?
- A. infrastructure monitoring tool sets
- B. images to easily replicate and manage infrastructure
- C. modern representation formats that describe and deploy infrastructure
- D. orchestrated workflows to enable cross-functional teams to deploy infrastructure
Answer: C
NEW QUESTION # 48
What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?
- A. Baseline
- B. Low
- C. Thorough
- D. High
Answer: D
NEW QUESTION # 49
Where can rules be configured and viewed to configure trusted images?
- A. Defend > Compliance > Trusted Images
- B. Monitor > Compliance > Images
- C. Monitor > Compliance > Trusted Images
- D. Defend > Compliance > Images
Answer: A
NEW QUESTION # 50
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi- tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active
/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. source and destination address translation
- B. source address translation
- C. destination address translation
- D. port address translation
Answer: B
NEW QUESTION # 51
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. transit gateway and security VPC with VM-Series
- B. transit VPC and security VPC with VM-Series
- C. iLB-as-next-hop
- D. traditional active/standby HA on VM-Series
Answer: A,D
NEW QUESTION # 52
Which statement reflects the default vulnerability management policy?
- A. Prisma Cloud scans images in all containers immediately upon policy activation.
- B. Policy rule order has little impact on optimization.
- C. The default vulnerability policy rule has an alert threshold to critical.
- D. Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.
Answer: D
NEW QUESTION # 53
Which statement applies to vulnerability management policies?
- A. Policies for containers, hosts, and serverless functions are not separate.
- B. Host and serverless rules support blocking, whereas container rules do not.
- C. Rules are evaluated in an undefined order.
- D. Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.
Answer: D
NEW QUESTION # 54
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. create a bootstrap file that includes the mgmt-interface-swap command
- B. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
- C. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- D. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
Answer: A,B
Explanation:
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on- google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for- google-internal-load-balancing.html
NEW QUESTION # 55
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. DoS Protection Profile with specific session counts
- B. Zone Protection Profile
- C. Custom threat signature
- D. QoS Profile to limit incoming requests
Answer: A
NEW QUESTION # 56
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. ARM Template
- B. Resource Group
- C. Azure Application Insight
- D. Bootstrapping
- E. Azure Security Center
Answer: C,D,E
NEW QUESTION # 57
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- B. CloudFormation is a procedural configuration management tool.
- C. CloudFormation templates can be written in JSON or YAML
- D. CloudFormation is a declarative orchestration tool.
Answer: C,D
NEW QUESTION # 58
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- A. Account hijacking attempts
- B. Unusual user activity
- C. Denial-of-service activity
- D. Suspicious file activity
- E. Excessive login failures
Answer: A,B,E
Explanation:
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html
NEW QUESTION # 59
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Border Customer Network
- B. Public IP for the VM-Series NGFW
- C. NAT appliance
- D. Azure Stack Edge Router
Answer: C
NEW QUESTION # 60
......
PSE-Prisma-Pro-24 Dumps and Exam Test Engine: https://quiztorrent.testbraindump.com/PSE-Prisma-Pro-24-exam-prep.html
