EMT Practice Test

1. Question Content...

---

Question1: Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

Question2: What are two benefits of Cloud Security Posture Management (CSPM) over other solutions? (Choose two.)

Question3: Which statement applies to optimization of registry scans with version pattern matching?

Question4: Which pattern syntax will add all images to a trusted images rule within a registry?

Question5: Which Amazon Web Services (AWS) service supplies information for Prisma Cloud "event where" Resource Query Language (RQL) queries?

Question6: An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

Question7: Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

Question8: Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

Question9: When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Question10: can you create a custom compliance standard in Prisma Public Cloud?

Question11: What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Question12: Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

Question13: Which filter type is valid in Asset Explorer?

Question14: How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?

Question15: How is license utilization displayed within the Prisma Public Cloud interface?

Question16: Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

Question17: Which regulatory framework in Prisma Cloud measures compliance with European Union (EU) data privacy regulations in Amazon Web services (AWS) workloads?

Question18: Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

Question19: What is the scope of the Amazon Web Services 1AM Service?

Question20: Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

Question21: Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

Question22: Which three services can Google Cloud Security Scanner assess? (Choose three.)

Question23: Which Prisma Public Cloud policy alerts administrators to unusual user activity?

Question24: What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

Question25: What are two business values of Cloud Code Security? (Choose two.)

Question26: Which two statements are true about CloudFormation? (Choose two.)

Question27: What occurs with the command twistcli when scanning images?

Question28: Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?

Question29: When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

Question30: Which two elements does Prisma Cloud monitor when analyzing for unusual user activity? (Choose two.)

Question31: A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

Question32: Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

Question33: Which RQL string returns a list of all Azure virtual machines that are not currently running?

Question34: Which type of Prisma Cloud Enterprise alert supports autoremediation?

Question35: Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Question36: Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Question37: What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?

Question38: What is Prisma Public Cloud licensing based on?

Question39: Which two cloud providers provide egress load balancing? (Choose two.)

Question40: Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

Question41: Match the logging service with its cloud provider.

Question42: How can all alerts related to "Amazon RDS" be quickly identified within the Prisma Cloud dashboard?

Question43: Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Question44: Which type of alert captures unusual user activity and excessive login failures?

Question45: Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)

Question46: What are the asset severity levels within Prisma Cloud asset inventory?

Question47: The following error is received when performing a manual twistcli scan on an image:

What is missing from the command?