Palo Alto Networks PSE-Prisma-Pro-24 Practice Exam Questions & Answers

Explanation The twistcli images scan subcommand is used to scan container images for vulnerabilities in Prisma Cloud Compute. This is a runtime security and workload protection task that scans images before or after deployment to identify vulnerabilities and compliance issues. Knowing the correct twistcli syntax is essential for vulnerability scanning operations in container environments.

Explanation

Account hijacking attempts

---Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is

impossible time travel

, or login from a previously unknown browser, operating system, or location.

Excessive login failures

---Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.

Unusual user activity

---Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html

Explanation An Internet Gateway is the AWS network component required for EC2 instances to communicate directly with the internet. Without it, even if a route table points to the internet, traffic cannot exit the VPC. A NAT Gateway would only work for instances in private subnets and requires an Internet Gateway upstream. Understanding infrastructure requirements is part of deployment and implementation best practices.

Explanation The twistcli images scan command requires a registry path in the image name parameter to identify which image to scan. Without the registry path, the tool cannot locate the image in your container registry. The format typically needs to include the registry URL and image repository so twistcli knows where to pull the image from for scanning.

Explanation Prisma Cloud Enterprise licensing counts specific resource types toward your license consumption. EC2 instances and CloudFront distributions are both included in the count. Understanding which resources consume licenses is critical for deployment planning and ensuring you have adequate licensing for your cloud environment. RDS databases and other services may not be included in the same licensing calculation.

Explanation

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Explanation In vulnerability management policies, the block threshold and alert threshold work together as escalation levels. The block threshold must be equal to or greater than the alert threshold because blocking is a stronger action than alerting. If the block threshold were lower, the system would try to block vulnerabilities before alerting on them, which defeats the purpose of having progressive remediation actions. This hierarchy ensures proper escalation in runtime security policies.