PSE-PrismaCloud PSE Palo Alto Networks System Engineer Professional - Prisma Cloud Questions and Answers

local scripts to public cloud APIs

remote function calls to host agents

third-party integration tools

public cloud CLI commands

Group2 / SHA-1 / AES-128-CBC / IKE-V1

Group2 / SHA-1 / AES-128-GCM / IKE-V1

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group2 / SHA-1 / AES-128-CBC

Group14 / SHA-256 / AES-256-CBC / IKE-V1

Generate a new Compliance Report.

Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

From Compliance tab, clone a default framework and customize.

From Compliance tab > Compliance Standards, click "Add New."

Azure SQL database instances

Google Kubernetes Engine

Oracle Functions service

Kubernetes DaemonSet

repo

trusted publisher

registry

base layer

registry path for image name

password

console address

username

Changes will take effect after a new learning phase of 30 days.

System will perform a reboot, deleting all past alerts.

Existing alerts and new alerts are regenerated based on the new setting.

New alerts are generated based on the new setting.

platform as a service

infrastructure as a service

software as code

infrastructure as code

self-managed in a customer's own container platform

self-contained hardware appliance

as a stand-alone Windows application

Cloud-hosted as part of a Prisma Cloud Enterprise tenant from Palo Alto Networks

guaranteed proof of concept (POC) extensions beyond 30 days

native integration of network, endpoint, and cloud data to stop attacks

elimination of blind spots

proactive addressing of risks

RQL queries

alert rules

notification templates

policies

network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

Reserved IP

PIP

EIP

Floating IP

DigitalOcean

Azure

IBM Cloud

Oracle Cloud

config

alert

event

data

Custom threat signature

Zone Protection Profile

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

> twistcli images scan

> twistcli project scan

> twistcli scan projects

> twistcli scan images

config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = is TERMINATED

config from cloud.resource where api.name = 'gcloud-compute-instances-list' = TERMINATED

config from cloud.resource where api.name = 'gcloud-compute-instances-list* and json.rule == status TERMINATED

config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = status contains TERMINATED

Configure an Inventory report from the "Alerts" tab.

Write an RQL query from the "Investigate" tab.

Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.

Generate a compliance report from the Compliance dashboard.

through ARM Templates in the GitHub Repository

through Solution Templates in the Azure Marketplace

through Expedition in the Customer Success Portal

through Iron Skillets in the GitHub Repository

*.acme.com

acme/*

acme.com/myrepo/allimages:/*

registry.acme.com/*

The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

security group

tags

elastic ip address

source/destination checking

Cloud Workload Protection (CWP)

Cloud Code Security

Cloud Network Security

Cloud Identity Security

AWS CDN

AWS NAT Gateway

AWS ALB

AWS NLB

ARM

XML

YAML

JSON

Cloud Security Posture Management

Cloud Identity Security

Cloud Network Security

Cloud Code Security

Create an RQL config query to identify resources with the tag "Private."

Create an RQL network query to identify traffic from resources tagged "Private."

Open the Asset Dashboard, filter on tags: and choose "Private."

Generate a CIS compliance report and review the "Asset Summary."