Which step should a SecOps engineer implement in order to create a network exposure policy that identifies instances accessible from any untrusted internet sources?

• A.In Policy Section-> Add Policy-> Config type -> Define Policy details Like Name,Severity-> Configure RQL query "config from network where source.network = UNTRUSTJNTERNET and dest.resource.type = 'Instance' and dest.cloud.type = 'AWS*" -> define compliance standard -> Define recommendation for remediation & save.
• B.In Policy Section-> Add Policy-> Network type -> Define Policy details Like Name.Severity-> Configure RQL query "network from vpc.flow_record where source.publicnetwork IN ('Suspicious IPs',
  'Internet IPs') and dest.resource IN (resource where role IN ('Instance ))" -> define compliance standard
  -> Define recommendation for remediation & save.
• C.In Policy Section-> Add Policy-> Network type -> Define Policy details Like Name.Severity-> Configure RQL query "network from vpc.flow_record where source.publicnetwork IN ('Suspicious IPs',
  'Internet IPs') and dest.resource IN (resource where role IN ( Instance ))" -> define compliance standard
  -> Define recommendation for remediation & save.
• D.In Policy Section-> Add Policy-> Network type -> Define Policy details Like Name.Severity-> Configure RQL query "config from network where source.network = UNTRUSTJNTERNET and dest.resource.type = 'Instance' and dest.cloud.type = 'AWS'" -> Define recommendation for remediation
  & save.

Comment: *

Name: *

Email: *

Verification: *

Which type of query is used for scanning Infrastructure as Code (laC) templates?

• A.API
• B.XML
• C.JSON
• D.RQL

Comment: *

Name: *

Email: *

Verification: *

One of the resources on the network has triggered an alert for a Default Config policy.
Given the following resource JSON snippet:

Which RQL detected the vulnerability?
A)

B)

C)

D)

• A.Option C
• B.Option D
• C.Option A
• D.Option B

Comment: *

Name: *

Email: *

Verification: *

On which cloud service providers can new API release information for Prisma Cloud be received?

• A.AWS. Azure. GCP. Oracle, IBM
• B.AWS. Azure. GCP, IBM, Alibaba
• C.AWS. Azure. GCP. Oracle, Alibaba
• D.AWS. Azure. GCP, IBM

Comment: *

Name: *

Email: *

Verification: *

You wish to create a custom policy with build and run subtypes. Match the query types for each example.
(Select your answer from the pull-down list. Answers may be used more than once or not at all.)

Correct Answer:

Reference:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a- policy.html

Comment: *

Name: *

Email: *

Verification: *