EMT Practice Test

1. Question Content...

---

Question1: Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

Question2: What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

Question3: Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

Question4: What occurs with the command twistcli when scanning images?

Question5: Where can rules be configured and viewed to configure trusted images?

Question6: An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock- shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.
What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

Question7: Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

Question8: A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

Question9: What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

Question10: Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

Question11: What are three examples of outbound traffic flow? (Choose three.)

Question12: Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Question13: What are two business values of Cloud Code Security? (Choose two.)

Question14: What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

Question15: Which two elements does Prisma Cloud monitor when analyzing for unusual user activity? (Choose two.)

Question16: What does Infrastructure as Code (laC) collect to enable automation?

Question17: An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi- tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active
/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

Question18: Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)

Question19: Which two data sources are ingested by Prisma Cloud? (Choose two.)

Question20: can you create a custom compliance standard in Prisma Public Cloud?

Question21: What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

Question22: Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

Question23: Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

Question24: Match the query type with its corresponding search

Question25: Which two types of Resource Query Language (RQL) queries can be used to create policies? (Choose two.)

Question26: What does Prisma Cloud execute to change public cloud infrastructure when autoremediation is enabled?

Question27: Match the logging service with its cloud provider.

Question28: How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

Question29: Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

Question30: Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Question31: Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Question32: What is required for an EC2 instance to access the internet directly from an AWS VPC?

Question33: The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

Question34: Which Amazon Web Services (AWS) service supplies information for Prisma Cloud "event where" Resource Query Language (RQL) queries?

Question35: Which change represents a VM-Series NGFW license transfer?

Question36: A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

Question37: A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.
Which type of Resource Query Language (RQL) query would be used in this policy?

Question38: Which statement reflects the default vulnerability management policy?

Question39: Which statement is specific for Prisma Cloud when integrating into cloud environments?

Question40: Which Google Cloud Platform project shares its VPC networks with other projects?

Question41: Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Question42: A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

Question43: Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?

Question44: How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?

Question45: Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

Question46: Which two deployment methods are supported for Prisma Cloud Compute (PCC) container Defenders?
(Choose two.)

Question47: An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?