Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free Paloalto Networks PSE-PrismaCloud Practice Exam with Questions & Answers | Set: 3

Questions 21

What occurs with the command twistcli when scanning images?

Options:
A.

If options are listed after the image name; they will be ignored.

B.

If option "--user" is used, it is mandatory to use option "--password.

C.

If option "--address" is unspecified, all images are scanned.

D.

Option "--output-file" cannot be used in conjunction with option "--details."

Questions 22

A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

PSE-PrismaCloud Question 22

Options:
Questions 23

When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

Options:
A.

Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

B.

Clone the predefined Strict Profile, with packet capture settings disabled

C.

Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

D.

Clone the predefined Strict Profile, with packet capture settings enabled

Questions 24

The following error is received when performing a manual twistcli scan on an image:

PSE-PrismaCloud Question 24

What is missing from the command?

Options:
A.

registry path for image name

B.

password

C.

console address

D.

username

Questions 25

A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.

Which type of Resource Query Language (RQL) query would be used in this policy?

Options:
A.

audit from

B.

network from

C.

event from

D.

config from

Questions 26

Which two deployment methods are supported for Prisma Cloud Compute (PCC) container Defenders? (Choose two.)

Options:
A.

Azure SQL database instances

B.

Google Kubernetes Engine

C.

Oracle Functions service

D.

Kubernetes DaemonSet

Questions 27

What is required for an EC2 instance to access the internet directly from an AWS VPC?

Options:
A.

Internet Gateway

B.

Transit Gateway

C.

Virtual Private Gateway

D.

Customer Gateway

Questions 28

Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

Options:
A.

config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = is TERMINATED

B.

config from cloud.resource where api.name = 'gcloud-compute-instances-list' = TERMINATED

C.

config from cloud.resource where api.name = 'gcloud-compute-instances-list* and json.rule == status TERMINATED

D.

config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = status contains TERMINATED

Questions 29

What subcommand invokes the Prisma Cloud Compute (PCC) edition image scanner?

Options:
A.

> twistcli images scan

B.

> twistcli project scan

C.

> twistcli scan projects

D.

> twistcli scan images

Questions 30

Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)

Options:
A.

Google Cloud Platform

B.

Microsoft Azure

C.

Oracle Cloud

D.

Amazon Web Services

Exam Code: PSE-PrismaCloud
Certification Provider: Paloalto Networks
Exam Name: PSE Palo Alto Networks System Engineer Professional - Prisma Cloud
Last Update: Jul 12, 2025
Questions: 115