[Oct-2023] 100% Guarantee Download PSE-PrismaCloud Exam Dumps PDF Q&A
Kickstart your Career with Real Updated Questions
Palo Alto Networks PSE-PrismaCloud exam is a certification program designed to validate the skills and expertise of system engineers who have a deep understanding of Prisma Cloud. PSE-PrismaCloud exam is designed to test the technical knowledge, skills, and experience of candidates in deploying, configuring, and managing Prisma Cloud.
NEW QUESTION # 22
Which change represents a VM-Series NGFW license transfer?
- A. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
- B. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
- C. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
- D. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
Answer: A
NEW QUESTION # 23
Match the query type with its corresponding search
Answer:
Explanation:
Explanation
network where,
event where,
config where
NEW QUESTION # 24
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- B. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- C. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
Answer: A
NEW QUESTION # 25
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- C. create a bootstrap file that includes the mgmt-interface-swap command
- D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 26
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?
- A. 10.0.1.254
- B. 10.0.2.1
- C. 10.0.3.1
- D. 10.0.3.255
Answer: C
NEW QUESTION # 27
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Shield
- B. Amazon Web Services WAF
- C. GuardDuty
- D. Inspector
Answer: D
NEW QUESTION # 28
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. port address translation
- B. source and destination address translation
- C. destination address translation
- D. source address translation
Answer: A
NEW QUESTION # 29
Which cloud provider supports iLB-as-next-hop?
- A. Microsoft Azure
- B. Alibaba Cloud
- C. Amazon Web Services
- D. Oracle Cloud
Answer: A
NEW QUESTION # 30
Match the query type with its corresponding search
Answer:
Explanation:
NEW QUESTION # 31
What is Prisma Public Cloud licensing based on?
- A. number of accounts onboarded
- B. volume of flow logs consumed
- C. number of monitored workloads
- D. number of alerts generated
Answer: C
NEW QUESTION # 32
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. Direct Connect
- B. IPsecVPN
- C. ExpressRoute
- D. Fast Connect
Answer: B,C
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
NEW QUESTION # 33
can you create a custom compliance standard in Prisma Public Cloud?
- A. From Compliance tab, clone a default framework and customize.
- B. Generate a new Compliance Report.
- C. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
- D. From Compliance tab > Compliance Standards, click "Add New."
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION # 34
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. launch a new VM using the PAYG image
- B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- C. purchase a new PAYG license from a reseller
- D. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
Answer: A
NEW QUESTION # 35
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. elastic ip address
- B. tags
- C. security group
- D. source/destination checking
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION # 36
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
NEW QUESTION # 37
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. notification templates
- B. RQL queries
- C. alert rules
- D. policies
Answer: D
NEW QUESTION # 38
How is license utilization displayed within the Prisma Public Cloud interface?
- A. navigate to the CLI and run show license command
- B. navigate to Settings (via the gear icon) > Licensing
- C. navigate to General > Licensing
- D. navigate to Dashboard > Asset Inventory
Answer: B
NEW QUESTION # 39
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Generate a compliance report from the Compliance dashboard
- B. Write an RQL query from the "Investigate" tab.
- C. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- D. Configure an Inventory report from the "Alerts" tab
Answer: A,C
NEW QUESTION # 40
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. Auth Code
- B. CPU ID
- C. UUID
- D. License Key
- E. Serial Number
Answer: B,C,E
NEW QUESTION # 41
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
- B. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION # 42
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?
- A. Create alert rules.
- B. Configure User-ID.
- C. Define enterprise settings.
- D. Whitelist IP addresses.
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION # 43
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)
- A. VM Monitoring
- B. External Dynamic List
- C. XML API
- D. CFT Template
Answer: A,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/
NEW QUESTION # 44
......
Earn Quick And Easy Success With PSE-PrismaCloud Dumps: https://dumpsvce.exam4free.com/PSE-PrismaCloud-valid-dumps.html
