PSE-PrismaCloud Questions and Answers

Traps

Prisma SaaS

Amazon Web Services WAF

VM-Series firewalls

Security Groups

Reserved IP

PIP

EIP

Floating IP

Shield

Inspector

GuardDuty

Amazon Web Services WAF

network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))

network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

network where dest.resource IN (resource where role = 'Database'}

network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))

Cloud Security Posture Management

Cloud Identity Security

Cloud Network Security

Cloud Code Security

Anomaly

Audit Event

Network

Configuration

Host and serverless rules support blocking, whereas container rules do not.

Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.

Policies for containers, hosts, and serverless functions are not separate.

Rules are evaluated in an undefined order.

guaranteed proof of concept (POC) extensions beyond 30 days

native integration of network, endpoint, and cloud data to stop attacks

elimination of blind spots

proactive addressing of risks

Service project

Host project

Admin project

Subscribing project

> twistcli project scan

> twistcli scar, projects

> twistcli hosts scan

> twistcli scar, hosts

GuardDuty

CloudTrail Audit Logs

Activity Logs

Inspector

VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services

VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services

VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

Override the value and commit the configuration.

Clone the existing policy and change the value.

Manually create the RQL statement.

Click the Gear icon next to the policy name to open the Edit Policy dialog

Configure an Inventory report from the "Alerts" tab.

Write an RQL query from the "Investigate" tab.

Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.

Generate a compliance report from the Compliance dashboard.

platform as a service

infrastructure as a service

software as code

infrastructure as code

> twistcli images scan

> twistcli project scan

> twistcli scan projects

> twistcli scan images

network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

ARM

XML

YAML

JSON

Azure Application Insight

Resource Group

Azure Security Center

Bootstrapping

ARM Template

VM Monitoring

External Dynamic List

CFT Template

XML API

through ARM Templates in the GitHub Repository

through Solution Templates in the Azure Marketplace

through Expedition in the Customer Success Portal

through Iron Skillets in the GitHub Repository

audit from

network from

event from

config from

If options are listed after the image name; they will be ignored.

If option "--user" is used, it is mandatory to use option "--password.

If option "--address" is unspecified, all images are scanned.

Option "--output-file" cannot be used in conjunction with option "--details."

AWS CDN

AWS NAT Gateway

AWS ALB

AWS NLB

Azure SQL database instances

Google Kubernetes Engine

Oracle Functions service

Kubernetes DaemonSet

Generate a new Compliance Report.

Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

From Compliance tab, clone a default framework and customize.

From Compliance tab > Compliance Standards, click "Add New."

set system setting mgmt-interface-swap enable yes

set mgmt-interface settings swap yes

set mgmt-interface swap yes

set system setting mgmt-interface swap yes

Monitor > Compliance > Trusted Images

Monitor > Compliance > Images

Defend > Compliance > Trusted Images

Defend > Compliance > Images