EMT Practice Test

1. Question Content...

---

Question1: Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Question2: Which pillar of the Prisma Cloud platform allows cloud entitlements to be quickly audited and secured?

Question3: Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

Question4: Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

Question5: What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Question6: Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

Question7: What does Infrastructure as Code (laC) collect to enable automation?

Question8: Which two deployment methods are supported for Prisma Cloud Compute (PCC) container Defenders? (Choose two.)

Question9: What are two valid image identifiers to designate trust? (Choose two.)

Question10: What are three examples of outbound traffic flow? (Choose three.)

Question11: Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?

Question12: Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?

Question13: Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

Question14: Which two statements are true about CloudFormation? (Choose two.)

Question15: A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

Question16: can you create a custom compliance standard in Prisma Public Cloud?

Question17: Which type of Prisma Cloud Enterprise alert supports autoremediation?

Question18: What are two examples of Amazon Web Services logging services? (Choose two.)

Question19: Which statement reflects the default vulnerability management policy?

Question20: Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

Question21: What subcommand invokes the Prisma Cloud Compute (PCC) edition image scanner?

Question22: The following error is received when performing a manual twistcli scan on an image:

What is missing from the command?

Question23: Which type of Resource Query Language (RQL) query is used to create a custom policy that looks for untagged resources?

Question24: An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

Question25: An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

Question26: Which pattern syntax will add all images to a trusted images rule within a registry?

Question27: Which two cloud providers provide egress load balancing? (Choose two.)

Question28: Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?

Question29: An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

Question30: What are two business values of Cloud Code Security? (Choose two.)

Question31: How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

Question32: Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Question33: Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?

Question34: What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?

Question35: Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Question36: Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance? (Choose two.)

Question37: What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

Question38: Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

Question39: Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)

Question40: Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)

Question41: The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

Question42: What happens in Prisma Cloud after Training Model Threshold or Alert Disposition is changed?

Question43: What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

Question44: Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Question45: Which change represents a VM-Series NGFW license transfer?

Question46: Under which operating systems (OSs) is twistcli supported?

Question47: Which two template formats are supported by the Prisma Cloud infrastructure as code (laC) scan service? (Choose two.)

Question48: Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

Question49: Match the query type with its corresponding search

Question50: Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

Question51: What is the scope of the Amazon Web Services 1AM Service?

Question52: An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.
What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

Question53: How can you modify a range of dates default policy in Prisma Public Cloud?

Question54: In which two ways can Prisma Cloud Compute (PCC) edition be installed? (Choose two.)

Question55: A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.
Which type of Resource Query Language (RQL) query would be used in this policy?

Question56: Which statement is specific for Prisma Cloud when integrating into cloud environments?

Question57: Which filter type is valid in Asset Explorer?

Question58: Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?