EMT Practice Test

1. Question Content...

---

Question1: What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

Question2: When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Question3: Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Question4: Which two statements are true about CloudFormation? (Choose two.)

Question5: Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

Question6: Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

Question7: Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

Question8: How is license utilization displayed within the Prisma Public Cloud interface?

Question9: Which change represents a VM-Series NGFW license transfer?

Question10: How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

Question11: Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Question12: Which Prisma Public Cloud policy alerts administrators to unusual user activity?

Question13: Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

Question14: Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Question15: In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

Question16: Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Question17: Which three services can Google Cloud Security Scanner assess? (Choose three.)

Question18: Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

Question19: The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

Question20: A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

Question21: How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?