[2026] Palo Alto Networks System Engineer - Prisma Cloud Professional

문제1

Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

A. Config from.cloud.resource where api.name = gcloud-compute-instance-list" and json.rule = TERMINATED

B. Config from.cloud.resource where api.name = gcloud-compute-instance-list" and json.rule = status == TERMINATED

C. Config from.cloud.resource where api.name = gcloud-compute-instance-list" and json.rule = status contains TERMINATED

D. Config from.cloud.resource where api.name = gcloud-compute-instance-list" and json.rule = is TERMINATED

정답: C

문제2

Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?

A. Cloud Network Security

B. Cloud Workload Protection (CWP)

C. Cloud Identity Security

D. Cloud Code Security

정답: A

문제3

In which two ways can Prisma Cloud Compute (PCC) edition be installed? (Choose two.)

A. Cloud-hosted as part of a Prisma Cloud Enterprise tenant from Palo Alto Networks

B. self-contained hardware appliance

C. self-managed in a customer's own container platform

D. as a stand-alone Windows application

정답: A,C

문제4

Which two types of Resource Query Language (RQL) queries can be used to create policies? (Choose two.)

A. hose from

B. system from

C. network from

D. event from

정답: A,D

문제5

When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

A. Group14 / SHA-256 / AES-256-GCM / IKE-V1

B. Group14 / SHA-256 / AES-256-CBC / IKE-V1

C. Group2 / SHA-1 / AES-128-GCM / IKE-V1

D. Group2 / SHA-1 / AES-128-CBC

E. Group2 / SHA-1 / AES-128-CBC / IKE-V1

정답: A,B

문제6

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

A. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

B. network where dest.resource IN (resource where role = 'Database'}

C. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

D. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

정답: A

문제7

In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

A. Aperture Orchestration Engine

B. fully instrumented API

C. VM Orchestration Policy Editor

D. support for Dynamic Address Groups

정답: B,D

문제8

The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

A. SQS

B. SNS

C. CodeDeploy

D. Lambda

정답: D

문제9

Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

A. config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = status contains TERMINATED

B. config from cloud.resource where api.name = 'gcloud-compute-instances-list* and json.rule == status TERMINATED

C. config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = is TERMINATED

D. config from cloud.resource where api.name = 'gcloud-compute-instances-list' = TERMINATED

정답: C

Palo Alto Networks System Engineer - Prisma Cloud Professional - PSE-Prisma-Pro-24무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트