Feb-2026 New Version PSE-Prisma-Pro-24 Certificate & Helpful Exam Dumps is Online
PSE-Prisma-Pro-24 Free Certification Exam Material with 118 Q&As
NEW QUESTION # 51
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?
- A. software as code
- B. infrastructure as a service
- C. platform as a service
- D. infrastructure as code
Answer: B
NEW QUESTION # 52
What is the scope of the Amazon Web Services 1AM Service?
- A. global
- B. VPC
- C. regional
- D. zonal
Answer: A
NEW QUESTION # 53
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Traps
- B. Security Groups
- C. Amazon Web Services WAF
- D. Prisma SaaS
- E. VM-Series firewalls
Answer: A,C,E
NEW QUESTION # 54
Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?
- A. event from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
- B. config from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true
- C. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
- D. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false
Answer: C
NEW QUESTION # 55
Which type of alert captures unusual user activity and excessive login failures?
- A. Anomaly
- B. Network
- C. Configuration
- D. Audit Event
Answer: A
NEW QUESTION # 56
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. Zone Protection Profile
- B. DoS Protection Profile with specific session counts
- C. Custom threat signature
- D. QoS Profile to limit incoming requests
Answer: B
NEW QUESTION # 57
Where can rules be configured and viewed to configure trusted images?
- A. Monitor > Compliance > Trusted Images
- B. Defend > Compliance > Images
- C. Monitor > Compliance > Images
- D. Defend > Compliance > Trusted Images
Answer: D
NEW QUESTION # 58
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
Answer: C
Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
networkwheredest.publicnetwork IN ('Internet IPs','Suspicious IPs') AND bytes > 1000000000
NEW QUESTION # 59
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?
- A. Configure User-ID.
- B. Define enterprise settings.
- C. Create alert rules.
- D. Whitelist IP addresses.
Answer: B
Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html
NEW QUESTION # 60
Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?
- A. The block threshold must always be equal to or greater than the alert threshold.
- B. The alert threshold always has precedence over, and can be greater than, the block threshold.
- C. The block threshold always has precedence over, and can be less than, the alert threshold.
- D. The thresholds can be set to informational, low, medium, high, and critical.
Answer: A
NEW QUESTION # 61
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- B. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- C. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- D. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-CBC
Answer: A,C
NEW QUESTION # 62
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- B. Support for the templates is available through Professional Services from Palo Alto Networks.
- C. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- D. Palo Alto Networks provides full support if a valid support license is in place.
Answer: A
NEW QUESTION # 63
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. Serial Number
- B. CPU ID
- C. Auth Code
- D. UUID
- E. License Key
Answer: A,B,D
NEW QUESTION # 64
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. traditional active/standby HA on VM-Series
- B. iLB-as-next-hop
- C. transit VPC and security VPC with VM-Series
- D. transit gateway and security VPC with VM-Series
Answer: A,D
NEW QUESTION # 65
What is a permanent public IP called on Amazon Web Services?
- A. PIP
- B. Reserved IP
- C. EIP
- D. Floating IP
Answer: C
NEW QUESTION # 66
Which two types of Resource Query Language (RQL) queries can be used to create policies? (Choose two.)
- A. network from
- B. system from
- C. hose from
- D. event from
Answer: C,D
NEW QUESTION # 67
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. UUID
- B. CPU ID
- C. new Auth Code
- D. API Key
Answer: C,D
Explanation:
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade- the-vm-series-firewall/upgrade-the-vm-series-model
NEW QUESTION # 68
......
Get The Important Preparation Guide With PSE-Prisma-Pro-24 Dumps: https://www.itpass4sure.com/PSE-Prisma-Pro-24-practice-exam.html
UPDATED PSE-Prisma-Pro-24 Exam Questions Certification Test Engine to PDF: https://drive.google.com/open?id=1lldz3Hqh-fHR7V2jAW6-cFMyDRy9bV0B
