Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free Paloalto Networks PSE-PrismaCloud Practice Exam with Questions & Answers

Questions 1

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Options:
A.

config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

B.

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

C.

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

D.

config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Questions 2

Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

Options:
A.

network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

B.

network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

C.

show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

D.

network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

Questions 3

Which statement reflects the default vulnerability management policy?

Options:
A.

Policy rule order has little impact on optimization.

B.

Prisma Cloud scans images in all containers immediately upon policy activation.

C.

The default vulnerability policy rule has an alert threshold to critical.

D.

Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.

Questions 4

Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)

Options:
A.

Deny

B.

Alert

C.

Block

D.

Ignore

Questions 5

Which filter type is valid in Asset Explorer?

Options:
A.

resource name

B.

instance

C.

cloud region

D.

feature

Questions 6

A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order

Which PAN-OS CLI command resolves this issue?

Options:
A.

set system setting mgmt-interface-swap enable yes

B.

set mgmt-interface settings swap yes

C.

set mgmt-interface swap yes

D.

set system setting mgmt-interface swap yes

Questions 7

Which Prisma Public Cloud policy alerts administrators to unusual user activity?

Options:
A.

Anomaly

B.

Audit Event

C.

Network

D.

Configuration

Questions 8

Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance? (Choose two.)

Options:
A.

UUID

B.

new Auth Code

C.

CPU ID

D.

API Key

Questions 9

Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Options:
A.

Palo Alto Networks provides full support if a valid support license is in place.

B.

Support for the templates is available through Professional Services from Palo Alto Networks.

C.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

D.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

Questions 10

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

Options:
A.

run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

B.

run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

C.

create a bootstrap file that includes the mgmt-interface-swap command

D.

in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Exam Code: PSE-PrismaCloud
Certification Provider: Paloalto Networks
Exam Name: PSE Palo Alto Networks System Engineer Professional - Prisma Cloud
Last Update: Jul 13, 2025
Questions: 115