EMT Practice Test

1. Question Content...

---

Question1: Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Question2: What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

Question3: Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

Question4: Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Question5: Match the logging service with its cloud provider.

Question6: A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

Question7: Match the query type with its corresponding search

Question8: How can you modify a range of dates default policy in Prisma Public Cloud?

Question9: Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Question10: What is the scope of the Amazon Web Services 1AM Service?

Question11: An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

Question12: What is a permanent public IP called on Amazon Web Services?

Question13: The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

Question14: Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

Question15: An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

Question16: A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

Question17: Which cloud provider supports iLB-as-next-hop?

Question18: Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

Question19: What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Question20: How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

Question21: Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?