How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?A . Create an RQL config query to identify resources with the tag "Private."B . Create an RQL network query to identify traffic from resources tagged "Private."C . Open the Asset Dashboard, filter...

January 19, 2021 No Comments READ MORE +

Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)A . iLB-as-next-hopB . transit gateway and security VPC with VM-SeriesC . traditional active/standby HA on VM-SeriesD . transit VPC and security VPC with VM-SeriesView AnswerAnswer: B,C

January 19, 2021 No Comments READ MORE +

Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?A . Palo Alto Networks provides full support if a valid support license is in place.B . Support for the templates is available through Professional Services from Palo Alto Networks.C . Unless otherwise noted, these...

January 19, 2021 No Comments READ MORE +

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)A . run the PAN-OS CLI command: set system mgmt-interface-swap enable yesB . run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yesC . create a bootstrap file that includes the...

January 18, 2021 No Comments READ MORE +

Which is a valid IP address to manage the VM-Series NGFW?

An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?A . 10.0.1.254B . 10.0.2.1C . 10.0.3.255D . 10.0.3.1View AnswerAnswer: D

January 15, 2021 No Comments READ MORE +

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?A . Both Source and Destination Checks are disabledB . Both Source and Destination Checks are enabledC . Source Check is disabled and Destination Check is enabledD . Source Check is enabled and Destination...

January 15, 2021 No Comments READ MORE +

How can you modify a range of dates default policy in Prisma Public Cloud?

How can you modify a range of dates default policy in Prisma Public Cloud?A . Override the value and commit the configuration.B . Clone the existing policy and change the value.C . Manually create the RQL statement.D . Click the Gear icon next to the policy name to open the...

January 14, 2021 No Comments READ MORE +

Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?A . HIPAAB . CIS BenchmarkC . Payment Card Industry DSS V3D . GDPRView AnswerAnswer: B

January 13, 2021 No Comments READ MORE +

What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks. What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?A . Custom threat signatureB . Zone Protection ProfileC . QoS...

January 12, 2021 No Comments READ MORE +

Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)A . TrapsB . Prisma SaaSC . Amazon Web Services WAFD . VM-Series firewallsE . Security GroupsView AnswerAnswer: A,C,D

January 11, 2021 No Comments READ MORE +