PSE-Prisma Cloud practice test

1. Question 1 · 1

   Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)

   Choose all answers that apply.

   • DigitalOcean
   • Azure
   • IBM Cloud
   • Oracle Cloud

2. Question 2 · 1

   How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?

   Choose one answer.

   • It inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found.
   • It makes changes after a policy violation has been identified in monitoring.
   • It locks all changes to public cloud infrastructure and stops any configuration changes without prior approval.
   • It uses machine learning (ML) to identify unusual changes to infrastructure.

3. Question 3 · 1

   Which framework in Prisma Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

   Choose one answer.

   • Payment Card Industry (PCI) Data Security Standard (DSS) V3
   • Health Insurance Portability and Accountability Act (HIPAA)
   • Center for Internet Security (CIS) Benchmark
   • General Data Protection Regulation (GDPR)

4. Question 4 · 1

   Which pattern syntax will add all images to a trusted images rule within a registry?

   Choose one answer.

   • *.acme.com
   • acme/*
   • acme.com/myrepo/allimages:/*
   • registry.acme.com/*

5. Question 5 · 1

   Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

   Choose one answer.

   • event where crud = 'delete' AND subject = 'user1'
   • event where crud = 'delete'
   • event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'
   • event where subject = 'user1'

6. Question 6 · 1

   Which type of Resource Query Language (RQL) query is used to create a custom policy that looks for untagged resources?

   Choose one answer.

   • config
   • alert
   • event
   • data

7. Question 7 · 1

   Which two data sources are ingested by Prisma Cloud? (Choose two.)

   Choose all answers that apply.

   • network flow logs
   • list of all database instances' tables
   • metadata about compute resources' configuration
   • Cortex Data Lake

8. Question 8 · 1

   Which Resource Query Language (RQL) query type monitors specific administrator activities?

   Choose one answer.

   • Event
   • Network
   • User
   • Config

9. Question 9 · 1

   Which Resource Query Language (RQL) string searches for all Elastic Block Store (EBS) volumes that do not have a "DataClassification" tag?

   Choose one answer.

   • config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
   • config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
   • config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key contains DataClassification
   • config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key does not contain DataClassification

10. Question 10 · 1

    Which Resource Query Language (RQL) string using network query attributes returns all traffic destined for Internet or Suspicious IPs, what also exceed 1GB?

    Choose one answer.

    • network from vpc.flow_record where publicnetwork = ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
    • network from vpc.flow_record where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
    • show traffic from vpc.flow_record where destination.network = ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
    • network from vpc.flow_record where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000

11. Question 11 · 1

    Which Resource Query Language (RQL) query monitors all traffic from the internet and suspicious internet protocols (IPs) destined for Amazon Web Services (AWS) databases?

    Choose one answer.

    • network from vpc.flow_record where dest.resource IN ( resource where role = 'Database')
    • network from vpc.flow_record where source.publicnetworк IN ( 'Suspicious IPs' , 'Internet IPs' ) and dest.resource IN ( resource where role IN ( 'LDAP' ) )
    • network from vpc.flow_record where source. publicr.etwork IN ( 'Suspicious IPs' ) and dest.resource IN ( resource where role IN ( 'AWS RDS' , 'Database' ) )
    • network from vpc.flow_record where source.publicnetwork IN ( 'Suspicious IPs' , 'Internet IPs' ) and dest.resource IN ( resource where role IN ( 'AWS RDS' , 'Database' ) )

12. Question 12 · 1

    An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry. What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

    Choose one answer.

    • The image will pass the CI policy, but will be blocked by the deployed policy; therefore, it will not be deployed.
    • The CI policy will fail the build; therefore, the image will not be deployed.
    • The image will be deployed successfully, and all vulnerabilities will be reported.
    • The image will be deployed successfully, but no vulnerabilities will be reported.

13. Question 13 · 1

    Which type of alert captures unusual user activity and excessive login failures?

    Choose one answer.

    • Anomaly
    • Audit Event
    • Configuration
    • Network

14. Question 14 · 1

    Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

    Choose all answers that apply.

    • Allow Prisma Cloud to automatically optimize registry scans with version pattern matching.
    • Allow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.
    • Explicitly specify the Defender to do the job.
    • Explicitly specify the predefined version pattern-matching algorithm.

15. Question 15 · 1

    Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

    Choose all answers that apply.

    • Elastic Compute Cloud (EC2) instances
    • Network Address Translation (NAT) gateways
    • CloudFront distributions
    • Security groups

Paid access to all 56 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.