Palo Alto Networks PSE-PrismaCloud Quiz 1 Topic 2 Questions 1-5

Question: 1

Which RQL string returns a list of all Azure virtual machines that are not currently running?

Aconfig where api.name = 'azure-vm-list' AND json.rule = powerState = 'off'

Bconfig where api.name = 'azure-vm-list' AND json.rule = powerState does not contain 'running'

Cconfig where api.name = 'azure-vm-list' AND json.rule = powerState = 'running'

Dconfig where api.name = 'azure-vm-list' AND json.rule = powerState contains 'running'

Show Answer

Question: 2

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

ABoth Source and Destination Checks are disabled

BBoth Source and Destination Checks are enabled

CSource Check is disabled and Destination Check is enabled

DSource Check is enabled and Destination Check is disabled
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Show Answer

Question: 3

How can you modify a range of dates default policy in Prisma Public Cloud?

AOverride the value and commit the configuration.

BClone the existing policy and change the value.

CManually create the RQL statement.

DClick the Gear icon next to the policy name to open the Edit Policy dialog

Show Answer

Question: 4

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Show Answer

Question: 5

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Aconfig where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

Bconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Cconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Dconfig where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Show Answer

Palo Alto Networks PSE-PrismaCloud Quiz:1 Topic:2 Questions:1-5