PDF無料ダウンロードにはPSE-Prisma-Pro-24有効な練習テスト問題
PSE-Prisma-Pro-24テストエンジンお試しセット、PSE-Prisma-Pro-24問題集PDF
質問 # 53
can you create a custom compliance standard in Prisma Public Cloud?
- A. From Compliance tab > Compliance Standards, click "Add New."
- B. Generate a new Compliance Report.
- C. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
- D. From Compliance tab, clone a default framework and customize.
正解：A
解説：
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create- a-custom-compliance-standard
質問 # 54
Which subcommand invokes the scan for images built with Jenkins in an OpenShift environment?
- A. > twistcli hosts scan
- B. > twistcli project scan
- C. > twistcli scar, hosts
- D. > twistcli scar, projects
正解：B
質問 # 55
Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?
- A. Cloud Identity Security
- B. Cloud Workload Protection (CWP)
- C. Cloud Network Security
- D. Cloud Security Posture Management
正解：B
質問 # 56
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. source/destination checking
- B. tags
- C. security group
- D. elastic ip address
正解：A
解説：
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws
/deploy-the-vm-series-firewall-on-aws/launch-the-vm-series-firewall-on-aws.html
質問 # 57
Which statement applies to vulnerability management policies?
- A. Policies for containers, hosts, and serverless functions are not separate.
- B. Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.
- C. Host and serverless rules support blocking, whereas container rules do not.
- D. Rules are evaluated in an undefined order.
正解：B
質問 # 58
What is the scope of the Amazon Web Services 1AM Service?
- A. regional
- B. global
- C. VPC
- D. zonal
正解：B
質問 # 59
Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?
- A. event from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
- B. config from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true
- C. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false
- D. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true
正解：D
質問 # 60
Which two data sources are ingested by Prisma Cloud? (Choose two.)
- A. metadata about compute resources' configuration
- B. Cortex Data Lake
- C. list of all database instances' tables
- D. network flow logs
正解：A、D
質問 # 61
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. Fast Connect
- B. ExpressRoute
- C. IPsecVPN
- D. Direct Connect
正解：B、C
解説：
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
質問 # 62
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- B. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Clone the predefined Strict Profile, with packet capture settings enabled
正解：D
質問 # 63
Which type of Prisma Cloud Enterprise alert supports autoremediation?
- A. audit
- B. config
- C. network
- D. anomaly
正解：B
質問 # 64
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- A. CodeDeploy
- B. Lambda
- C. SNS
- D. SQS
正解：B
質問 # 65
How can a range of dates in the Prisma Cloud default policy be modified?
- A. Override the value and commit the configuration.
- B. Click the gear icon next to the policy name to open the "Edit Policy" dialog.
- C. Manually create the Resource Query Language (RQL) statement.
- D. Clone the existing policy and change the value.
正解：D
質問 # 66
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Generate a compliance report from the Compliance dashboard
- B. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- C. Write an RQL query from the "Investigate" tab.
- D. Configure an Inventory report from the "Alerts" tab
正解：B、C
質問 # 67
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- B. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- C. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- D. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- E. Group2 / SHA-1 / AES-128-CBC
正解：A、C
質問 # 68
Which three services can Google Cloud Security Scanner assess? (Choose three.)
- A. Google Virtual Private Cloud
- B. Google Kubernetes Engine
- C. App Engine
- D. BigQuery
- E. Compute Engine
正解：B、C、E
質問 # 69
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- A. Denial-of-service activity
- B. Excessive login failures
- C. Account hijacking attempts
- D. Suspicious file activity
- E. Unusual user activity
正解：B、C、E
解説：
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html
質問 # 70
Which two template formats are supported by the Prisma Cloud infrastructure as code (laC) scan service?
(Choose two.)
- A. JSON
- B. ARM
- C. YAML
- D. XML
正解：B、C
質問 # 71
What is a permanent public IP called on Amazon Web Services?
- A. Floating IP
- B. PIP
- C. Reserved IP
- D. EIP
正解：D
質問 # 72
Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)
- A. Oracle Cloud
- B. Azure
- C. DigitalOcean
- D. IBM Cloud
正解：A、B
質問 # 73
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CIoudTrail
- B. CloudWatch
- C. CloudEvent
- D. CloudLog
正解：A、B
質問 # 74
......
あなたを合格させるPSE-Prisma Cloud Professional PSE-Prisma-Pro-24試験問題集で2026年03月17日には118問あります：https://www.jpntest.com/shiken/PSE-Prisma-Pro-24-mondaishu
最新のPalo Alto Networks PSE-Prisma-Pro-24PDFと問題集で（2026）無料試験問題解答：https://drive.google.com/open?id=1aSCcgEQ8tiyRBQRwn4_pA51ZKe204XfZ