The Palo Alto Networks PSE-Prisma-Pro-24 Questions & Practice Test are Available On-Demand [Q60-Q81]

PSE-Prisma-Pro-24 Palo Alto Networks

admin • December 30, 2025

The Palo Alto Networks PSE-Prisma-Pro-24 Questions & Practice Test are Available On-Demand [Q60-Q81]

Rate this post

The Palo Alto Networks PSE-Prisma-Pro-24 Questions & Practice Test are Available On-Demand

Valid PSE-Prisma-Pro-24 Exam Dumps Ensure you a HIGH SCORE

NO.60 What is Prisma Public Cloud licensing based on?

number of alerts generated

number of accounts onboarded

number of monitored workloads

volume of flow logs consumed

NO.61 What are two business values of Cloud Code Security? (Choose two.)

consistent controls from build time to runtime

prebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects

support for multiple languages, runtimes and frameworks

continuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

NO.62 Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

GDPR

EU Data Protection Directive 95/46/EC

ISO 27001

Payment Card Industry 3.0

NO.63 A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.
Which type of Resource Query Language (RQL) query would be used in this policy?

audit from

network from

event from

config from

NO.64 In which two ways can Prisma Cloud Compute (PCC) edition be installed? (Choose two.)

self-managed in a customer’s own container platform

self-contained hardware appliance

as a stand-alone Windows application

Cloud-hosted as part of a Prisma Cloud Enterprise tenant from Palo Alto Networks

NO.65 Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

network where publicnetwork = (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

network where dest publicnetwork IN (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

show traffic where destination.network = (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

network where bytes > 1GB and destination = ‘Internet IPs’ OR ‘Suspicious IPs’

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
networkwheredest.publicnetwork IN (‘Internet IPs’,’Suspicious IPs’) AND bytes > 1000000000

NO.66 How can a range of dates in the Prisma Cloud default policy be modified?

Clone the existing policy and change the value.

Click the gear icon next to the policy name to open the “Edit Policy” dialog.

Manually create the Resource Query Language (RQL) statement.

Override the value and commit the configuration.

NO.67 Which type of Prisma Cloud Enterprise alert supports autoremediation?

network

audit

anomaly

config

NO.68 Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

Serial Number

CPU ID

Auth Code

License Key

UUID

NO.69 Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

compliance where

network where

user where

config where

event where

NO.70 When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Group2 / SHA-1 / AES-128-CBC / IKE-V1

Group2 / SHA-1 / AES-128-GCM / IKE-V1

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group2 / SHA-1 / AES-128-CBC

Group14 / SHA-256 / AES-256-CBC / IKE-V1

NO.71 What is a permanent public IP called on Amazon Web Services?

Reserved IP

PIP

EIP

Floating IP

NO.72 Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

config from cloud.resource where api.name = ‘gcloud-compute-instances-list’ and json.rule = is TERMINATED

config from cloud.resource where api.name = ‘gcloud-compute-instances-list’ = TERMINATED

config from cloud.resource where api.name = ‘gcloud-compute-instances-list* and json.rule == status TERMINATED

config from cloud.resource where api.name = ‘gcloud-compute-instances-list’ and json.rule = status contains TERMINATED

NO.73 What does Infrastructure as Code (laC) collect to enable automation?

modern representation formats that describe and deploy infrastructure

orchestrated workflows to enable cross-functional teams to deploy infrastructure

images to easily replicate and manage infrastructure

infrastructure monitoring tool sets

NO.74 Match the query type with its corresponding search

Explanation:
network where,
event where,
config where

NO.75 What are the asset severity levels within Prisma Cloud asset inventory?

Low, Medium, and High

Low, Medium, High, and Critical

Informational, Low, Medium, and High

Low, Medium, High, Severe, and Critical

NO.76 Which type of alert captures unusual user activity and excessive login failures?

Anomaly

Audit Event

Configuration

Network

NO.77 Which two cloud providers provide egress load balancing? (Choose two.)

Microsoft Azure

Alibaba Cloud

Amazon Web Services

Oracle Cloud

NO.78 How can all alerts related to “Amazon RDS” be quickly identified within the Prisma Cloud dashboard?

Generate a Center for Internet Security (CIS) compliance report and search for “Amazon RDS” policy violations.

View the alert data on the “Asset Inventory” dashboard and filter on “Amazon RDS.

Within the “Alerts” tab. filter on “Amazon RDS” as a service.

Create a custom Resource Query Language (RQL) configuration report.

NO.79 Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

Excessive login failures

Unusual user activity

Denial-of-service activity

Account hijacking attempts

Suspicious file activity

Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user’s activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html

NO.80 Which three services can Google Cloud Security Scanner assess? (Choose three.)

Google Kubernetes Engine

BigQuery

Compute Engine

App Engine

Google Virtual Private Cloud

NO.81 Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

Shield

Inspector

GuardDuty

Amazon Web Services WAF

Loading …