10 free sample questions from a bank of 65, with the correct answers and explanations. No signup required — start practising right now.
1Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)
DigitalOcean
Azure
IBM Cloud
Oracle Cloud
Answer: B, D
2How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?
It inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found.
It makes changes after a policy violation has been identified in monitoring.
It locks all changes to public cloud infrastructure and stops any configuration changes without prior approval.
It uses machine learning (ML) to identify unusual changes to infrastructure.
Answer: B
3Which framework in Prisma Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
Payment Card Industry (PCI) Data Security Standard (DSS) V3
Health Insurance Portability and Accountability Act (HIPAA)
Center for Internet Security (CIS) Benchmark
General Data Protection Regulation (GDPR)
Answer: C
4Which pattern syntax will add all images to a trusted images rule within a registry?
*.acme.com
acme/*
acme.com/myrepo/allimages:/*
registry.acme.com/*
Answer: D
5Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?
event where crud = 'delete' AND subject = 'user1'
event where crud = 'delete'
event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'
event where subject = 'user1'
Answer: A
6Which type of Resource Query Language (RQL) query is used to create a custom policy that looks for untagged resources?
config
alert
event
data
Answer: A
7Which two data sources are ingested by Prisma Cloud? (Choose two.)
network flow logs
list of all database instances' tables
metadata about compute resources' configuration
Cortex Data Lake
Answer: A, C
8Which Resource Query Language (RQL) query type monitors specific administrator activities?
Event
Network
User
Config
Answer: A
9Which Resource Query Language (RQL) string searches for all Elastic Block Store (EBS) volumes that do not have a "DataClassification" tag?
config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key contains DataClassification
config cloud.resource from api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key does not contain DataClassification
Answer: D
10Which Resource Query Language (RQL) string using network query attributes returns all traffic destined for Internet or Suspicious IPs, what also exceed 1GB?
network from vpc.flow_record where publicnetwork = ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
network from vpc.flow_record where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
show traffic from vpc.flow_record where destination.network = ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
network from vpc.flow_record where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000