Palo Alto Networks PSE-PrismaCloud Quiz 2 Topic 9 Questions 6-10

Question: 1

The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.

How does Amazon Web Services achieve this integration?

ASNS

BSQS

CCodeDeploy

DLambda

Show Answer

Question: 2

How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

Apurchase a new PAYG license from a reseller

Bgo to Palo Alto Networks Support website to change the BYOL license to a PAYG license

Cpurchase a new PAYG license for Microsoft Azure from Palo Alto Networks

Dlaunch a new VM using the PAYG image

Show Answer

Question: 3

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Aconfig where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

Bconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Cconfig where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Dconfig where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Show Answer

Question: 4

How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

Apurchase a new PAYG license from a reseller

Bgo to Palo Alto Networks Support website to change the BYOL license to a PAYG license

Cpurchase a new PAYG license for Microsoft Azure from Palo Alto Networks

Dlaunch a new VM using the PAYG image

Show Answer

Question: 5

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Show Answer

Palo Alto Networks PSE-PrismaCloud Quiz:2 Topic:9 Questions:6-10