Updated Palo Alto Networks PSE-PrismaCloud Exam Dumps

Question No: 1

MultipleChoice

Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

Options

AElastic Compute Cloud (EC2) instances

BNetwork Address Translation (NAT) gateways

CCloudFront distributions

DSecurity groups

Question No: 2

MultipleChoice

A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Select two.)

Options

AGenerate a compliance report from the Compliance dashboard

BWrite an RQL query from the 'Investigate' tab.

CConfigure an Inventory report from the 'Alerts' tab

DOpen the Asset dashboard, filter on Amazon Web Services, and click 'Amazon RDS' resources.

Question No: 3

MultipleChoice

Where can rules be configured and viewed to configure trusted images?

Options

AMonitor > Compliance > Trusted Images

BMonitor > Compliance > Images

CDefend > Compliance > Trusted Images

DDefend > Compliance > Images

Question No: 4

MultipleChoice

Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?

Options

Aevent from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'Google Bigtable Instance'

Bevent from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'cloudsql.googleapis.com'

Cevent from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'bigquery.googleapis.com'

Devent from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'dataproc.googleapis.com'

Question No: 5

MultipleChoice

An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

Options

Asecurity group

Btags

Celastic ip address

Dsource/destination checking

Question No: 6

MultipleChoice

What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

Options

APublic IP for the VM-Series NGFW

BNAT appliance

CAzure Stack Edge Router

DBorder Customer Network

Question No: 7

MultipleChoice

Which change represents a VM-Series NGFW license transfer?

Options

AVM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services

BVM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services

CVM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

DVM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

Question No: 8

MultipleChoice

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Options

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Question No: 9

MultipleChoice

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Options

Aconfig where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

Bconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Cconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Dconfig where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Free Palo Alto Networks PSE-PrismaCloud Exam Dumps August 2026