[Aug-2022] PSE-PrismaCloud PDF Dumps Are Helpful To produce Your Dreams Correct QA's
New PSE-PrismaCloud exam Free Sample Questions to Practice
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION 26
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?
- A. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))
- B. network where dest.resource IN (resource where role = 'Database'}
- C. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
- D. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
Answer: D
NEW QUESTION 27
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?
- A. infrastructure as a service
- B. platform as a service
- C. software as code
- D. infrastructure as code
Answer: A
NEW QUESTION 28
Which change represents a VM-Series NGFW license transfer?
- A. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
- B. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
- C. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
- D. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
Answer: B
NEW QUESTION 29
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
- B. create a bootstrap file that includes the mgmt-interface-swap command
- C. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- D. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
Answer: A,B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 30
How is license utilization displayed within the Prisma Public Cloud interface?
- A. navigate to General > Licensing
- B. navigate to the CLI and run show license command
- C. navigate to Dashboard > Asset Inventory
- D. navigate to Settings (via the gear icon) > Licensing
Answer: D
NEW QUESTION 31
Match the query type with its corresponding search
Answer:
Explanation:
Explanation
network where,
event where,
config where
NEW QUESTION 32
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- B. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- C. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
- D. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
Answer: A
NEW QUESTION 33
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
Answer: B
NEW QUESTION 34
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. Auth Code
- B. License Key
- C. UUID
- D. Serial Number
- E. CPU ID
Answer: A,D,E
NEW QUESTION 35
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. Payment Card Industry 3.0
- B. EU Data Protection Directive 95/46/EC
- C. ISO 27001
- D. GDPR
Answer: D
NEW QUESTION 36
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Internet Gateway
- B. Customer Gateway
- C. Virtual Private Gateway
- D. Transit Gateway
Answer: A
NEW QUESTION 37
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?
- A. Clone the predefined Strict Profile, with packet capture settings disabled
- B. Clone the predefined Strict Profile, with packet capture settings enabled
- C. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
Answer: B
NEW QUESTION 38
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation is a procedural configuration management tool.
- B. CloudFormation is a declarative orchestration tool.
- C. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- D. CloudFormation templates can be written in JSON or YAML
Answer: C,D
NEW QUESTION 39
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- A. SQS
- B. CodeDeploy
- C. Lambda
- D. SNS
Answer: C
NEW QUESTION 40
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Generate a CIS compliance report and review the "Asset Summary."
- B. Open the Asset Dashboard, filter on tags: and choose "Private."
- C. Create an RQL network query to identify traffic from resources tagged "Private."
- D. Create an RQL config query to identify resources with the tag "Private."
Answer: C
NEW QUESTION 41
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. source/destination checking
- B. tags
- C. security group
- D. elastic ip address
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION 42
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- B. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC
- D. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-CBC / IKE-V1
Answer: A,D
NEW QUESTION 43
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. DoS Protection Profile with specific session counts
- B. Zone Protection Profile
- C. QoS Profile to limit incoming requests
- D. Custom threat signature
Answer: A
NEW QUESTION 44
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Prisma SaaS
- B. VM-Series firewalls
- C. Security Groups
- D. Traps
- E. Amazon Web Services WAF
Answer: A,B,C
NEW QUESTION 45
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. VM Orchestration Policy Editor
- B. Aperture Orchestration Engine
- C. fully instrumented API
- D. support for Dynamic Address Groups
Answer: C,D
NEW QUESTION 46
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
- A. event where
- B. config where
- C. user where
- D. compliance where
- E. network where
Answer: A,D,E
NEW QUESTION 47
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. VM Orchestration Policy Editor
- B. fully instrumented API
- C. Aperture Orchestration Engine
- D. support for Dynamic Address Groups
Answer: C,D
NEW QUESTION 48
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. source address translation
- B. port address translation
- C. source and destination address translation
- D. destination address translation
Answer: B
NEW QUESTION 49
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Bootstrapping
- B. ARM Template
- C. Resource Group
- D. Azure Security Center
- E. Azure Application Insight
Answer: A,B,E
NEW QUESTION 50
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-500
- B. VM-300
- C. VM-100
- D. VM-GCP
Answer: B
NEW QUESTION 51
......
Cover PSE-PrismaCloud Exam Questions Make Sure You 100% Pass: https://passleader.briandumpsprep.com/PSE-PrismaCloud-prep-exam-braindumps.html
