Palo Alto Networks PSE-PrismaCloud Quiz 2 Topic 9 Questions 6-10

Question: 1

The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.

How does Amazon Web Services achieve this integration?

ASNS

BSQS

CCodeDeploy

DLambda

Show Answer

Question: 2

How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

Apurchase a new PAYG license from a reseller

Bgo to Palo Alto Networks Support website to change the BYOL license to a PAYG license

Cpurchase a new PAYG license for Microsoft Azure from Palo Alto Networks

Dlaunch a new VM using the PAYG image

Show Answer

Question: 3

The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.

How does Amazon Web Services achieve this integration?

ASNS

BSQS

CCodeDeploy

DLambda

Show Answer

Question: 4

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

ABoth Source and Destination Checks are disabled

BBoth Source and Destination Checks are enabled

CSource Check is disabled and Destination Check is enabled

DSource Check is enabled and Destination Check is disabled
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Show Answer

Question: 5

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Show Answer

Palo Alto Networks PSE-PrismaCloud Quiz:2 Topic:9 Questions:6-10