[Q43-Q63] Try 100% Updated PSE-Prisma-Pro-24 Exam Questions [2025]

Try 100% Updated PSE-Prisma-Pro-24 Exam Questions [2025]

Pass PSE-Prisma-Pro-24 Exam - Real Questions and Answers

NEW QUESTION # 43
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

A. CodeDeploy
B. Lambda
C. SNS
D. SQS

Answer: B

NEW QUESTION # 44
Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)

A. Cortex Data Lake
B. Cloud Storage buckets
C. Compute Engine instance
D. Prisma Access Gateways

Answer: A,B

NEW QUESTION # 45
Which three services can Google Cloud Security Scanner assess? (Choose three.)

A. BigQuery
B. App Engine
C. Google Kubernetes Engine
D. Google Virtual Private Cloud
E. Compute Engine

Answer: B,C,E

NEW QUESTION # 46
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

A. Define enterprise settings.
B. Configure User-ID.
C. Whitelist IP addresses.
D. Create alert rules.

Answer: A

Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html

NEW QUESTION # 47
Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

A. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
B. event from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
C. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false
D. config from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true

Answer: A

NEW QUESTION # 48
Which Prisma Public Cloud policy alerts administrators to unusual user activity?

A. Anomaly
B. Network
C. Configuration
D. Audit Event

Answer: A

Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html

NEW QUESTION # 49
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

A. AWS NLB
B. AWS CDN
C. AWS ALB
D. AWS NAT Gateway

Answer: B,C

NEW QUESTION # 50
What is the scope of the Amazon Web Services 1AM Service?

A. global
B. regional
C. zonal
D. VPC

Answer: A

NEW QUESTION # 51
Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

A. event where crud = 'delete'
B. event where crud = 'delete' AND subject = 'user1'
C. event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'
D. event where subject = 'user1'

Answer: C

NEW QUESTION # 52
What are three examples of outbound traffic flow? (Choose three.)

A. issue yum update command on an instance inside Amazon Web Services
B. web server inside Amazon Web Services receiving web requests from internet
C. issue apt-get install command on an instance inside Amazon Web Services
D. outgoing Prisma Public Cloud API calls
E. Microsoft Windows inside Azure requesting a security patch

Answer: A,C,D

NEW QUESTION # 53
Which type of Resource Query Language (RQL) query is used to create a custom policy that looks for untagged resources?

A. config
B. event
C. alert
D. data

Answer: A

NEW QUESTION # 54
Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?

A. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'cloudsql.googleapis.com'
B. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'Google Bigtable Instance'
C. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'bigquery.googleapis.com'
D. event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'dataproc.googleapis.com'

Answer: C

NEW QUESTION # 55
What is Prisma Public Cloud licensing based on?

A. volume of flow logs consumed
B. number of monitored workloads
C. number of accounts onboarded
D. number of alerts generated

Answer: B

NEW QUESTION # 56
Which statement applies to vulnerability management policies?

A. Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.
B. Rules are evaluated in an undefined order.
C. Policies for containers, hosts, and serverless functions are not separate.
D. Host and serverless rules support blocking, whereas container rules do not.

Answer: A

NEW QUESTION # 57
Which Amazon Web Services (AWS) service supplies information for Prisma Cloud "event where" Resource Query Language (RQL) queries?

A. Activity Logs
B. Inspector
C. GuardDuty
D. CloudTrail Audit Logs

Answer: D

NEW QUESTION # 58
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

A. 10.0.2.1
B. 10.0.3.1
C. 10.0.3.255
D. 10.0.1.254

Answer: B

NEW QUESTION # 59
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

A. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
B. Configure an Inventory report from the "Alerts" tab
C. Generate a compliance report from the Compliance dashboard
D. Write an RQL query from the "Investigate" tab.

Answer: A,D

NEW QUESTION # 60
Which type of Prisma Cloud Enterprise alert supports autoremediation?

A. config
B. anomaly
C. network
D. audit

Answer: A

NEW QUESTION # 61
Which statement reflects the default vulnerability management policy?

A. Policy rule order has little impact on optimization.
B. The default vulnerability policy rule has an alert threshold to critical.
C. Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.
D. Prisma Cloud scans images in all containers immediately upon policy activation.

Answer: C

NEW QUESTION # 62
Match the logging service with its cloud provider.