Palo Alto Networks Exam PSE-PrismaCloud Topic 4 Question 79 Discussion

Actual exam question for Palo Alto Networks's PSE-PrismaCloud exam

Question #: 79
Topic #: 4

Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

Anetwork where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

Bnetwork where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

Cshow traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

Dnetwork where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples
All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000

Show Suggested Answer

Suggested Answer: B

by Beatriz at Sep 14, 2024, 12:28 AM

Limited Time Offer

25%

Off

Get Premium PSE-PrismaCloud Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sheridan

2 months ago

Option B is the clear winner here. Although, I do have to say, 'bytes > 1GB' just doesn't have the same ring to it as 'bytes > 1 gigabyte'. I'm a sucker for a good unit of measurement.

upvoted 0 times

...

Carmelina

2 months ago

Option B is the way to go. Gotta love those clear and concise RQL queries, makes my job a lot easier!

upvoted 0 times

Kaitlyn

1 months ago

User 4: Absolutely, Option B simplifies the process and saves time.

upvoted 0 times

...

Curt

1 months ago

I always appreciate clear and concise queries, makes troubleshooting much smoother.

upvoted 0 times

...

Shantay

1 months ago

I agree, it's straightforward and gets the job done efficiently.

upvoted 0 times

...

Norah

2 months ago

Option B is definitely the best choice for that RQL query.

upvoted 0 times

...

Destiny

2 months ago

But option B uses 'dest publicnetwork' instead of 'destination.network', so I think A is more accurate.

upvoted 0 times

...

Carman

2 months ago

I disagree, I believe the answer is B.

upvoted 0 times

...

Samira

3 months ago

I agree with Aileen, option B seems to be the most comprehensive and accurate way to get the required information.

upvoted 0 times

Lucy

1 months ago

Definitely, option B covers all the requirements.

upvoted 0 times

...

Leonard

1 months ago

Yes, I agree. It seems to be the most accurate choice.

upvoted 0 times

...

Noah

2 months ago

I think option B is the correct one.

upvoted 0 times

...

Aileen

3 months ago

Option B looks like the right choice to me. It's the only one that specifically checks if the destination is in the 'Internet IPs' or 'Suspicious IPs' list, and also checks for the traffic exceeding 1GB.

upvoted 0 times