Palo Alto Networks Exam PSE-PrismaCloud Topic 2 Question 82 Discussion

Actual exam question for Palo Alto Networks's PSE-PrismaCloud exam

Question #: 82
Topic #: 2

Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases''

Anetwork where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

Bnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Cnetwork where dest.resource IN (resource where role = 'Database'}

Dnetwork where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Show Suggested Answer

Suggested Answer: D

by Marilynn at Sep 15, 2024, 05:37 AM

Limited Time Offer

25%

Off

Get Premium PSE-PrismaCloud Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Krystal

5 months ago

Hmm, that makes sense too. I guess it depends on how the question is interpreted.

upvoted 0 times

...

Freida

5 months ago

Haha, option B is like trying to monitor LDAP traffic for your databases. Good one, but not what we're looking for here.

upvoted 0 times

Virgie

4 months ago

D) network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

upvoted 0 times

...

Basilia

4 months ago

C) network where dest.resource IN (resource where role = 'Database'}

upvoted 0 times

...

Marlon

4 months ago

A) network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

upvoted 0 times

...

Germaine

5 months ago

I disagree, I believe the correct answer is D because it includes both Suspicious IPs and Internet IPs in the source.publicnetwork.

upvoted 0 times

...

Krystal

5 months ago

I think the answer is A because it specifically mentions monitoring traffic from the Internet and Suspicious IPs to AWS databases.

upvoted 0 times

...

Eladia

5 months ago

I agree, D is the way to go. Can't go wrong with monitoring those pesky internet and suspicious IPs.

upvoted 0 times

...

Ivan

5 months ago

Option D looks like the correct answer. It monitors all traffic from the internet and suspicious IPs destined for AWS databases.

upvoted 0 times

Lindy

5 months ago

Yes, option D covers monitoring traffic from the internet and suspicious IPs to AWS databases.

upvoted 0 times

...

Layla

5 months ago

I think option D is the right choice.

upvoted 0 times

...