PSE-PrismaCloud Free Exam Questions and Answers PDF Updated on Jul-2023
Latest PSE-PrismaCloud Exam Dumps Recently Updated 62 Questions
NEW QUESTION # 18
Which three services can Google Cloud Security Scanner assess? (Choose three.)
- A. Google Kubernetes Engine
- B. Compute Engine
- C. BigQuery
- D. App Engine
- E. Google Virtual Private Cloud
Answer: A,B,D
NEW QUESTION # 19
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Virtual Private Gateway
- B. Customer Gateway
- C. Transit Gateway
- D. Internet Gateway
Answer: D
NEW QUESTION # 20
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
- B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- C. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- D. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
Answer: D
NEW QUESTION # 21
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Azure Stack Edge Router
- B. Border Customer Network
- C. NAT appliance
- D. Public IP for the VM-Series NGFW
Answer: A
NEW QUESTION # 22
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)
- A. VM Monitoring
- B. External Dynamic List
- C. CFT Template
- D. XML API
Answer: A,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/
NEW QUESTION # 23
can you create a custom compliance standard in Prisma Public Cloud?
- A. From Compliance tab, clone a default framework and customize.
- B. Generate a new Compliance Report.
- C. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
- D. From Compliance tab > Compliance Standards, click "Add New."
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION # 24
What are three examples of outbound traffic flow? (Choose three.)
- A. Microsoft Windows inside Azure requesting a security patch
- B. web server inside Amazon Web Services receiving web requests from internet
- C. issue apt-get install command on an instance inside Amazon Web Services
- D. outgoing Prisma Public Cloud API calls
- E. issue yum update command on an instance inside Amazon Web Services
Answer: A,C,D
NEW QUESTION # 25
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
Answer: A
NEW QUESTION # 26
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Prisma SaaS
- B. VM-Series firewalls
- C. Traps
- D. Amazon Web Services WAF
- E. Security Groups
Answer: A,B,E
NEW QUESTION # 27
How is license utilization displayed within the Prisma Public Cloud interface?
- A. navigate to the CLI and run show license command
- B. navigate to Dashboard > Asset Inventory
- C. navigate to General > Licensing
- D. navigate to Settings (via the gear icon) > Licensing
Answer: D
NEW QUESTION # 28
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- B. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- C. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
- D. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
Answer: D
NEW QUESTION # 29
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- B. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- C. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
Answer: B
NEW QUESTION # 30
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. UUID
- B. new Auth Code
- C. CPU ID
- D. API Key
Answer: A,C
Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th
NEW QUESTION # 31
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. tags
- B. elastic ip address
- C. security group
- D. source/destination checking
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION # 32
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 33
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-100
- B. VM-300
- C. VM-GCP
- D. VM-500
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 34
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. Fast Connect
- B. Direct Connect
- C. IPsecVPN
- D. ExpressRoute
Answer: C,D
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
NEW QUESTION # 35
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?
- A. infrastructure as a service
- B. platform as a service
- C. infrastructure as code
- D. software as code
Answer: A
NEW QUESTION # 36
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Azure Application Insight
- B. Bootstrapping
- C. Azure Security Center
- D. Resource Group
- E. ARM Template
Answer: A,B,C
NEW QUESTION # 37
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. DoS Protection Profile with specific session counts
- B. Zone Protection Profile
- C. Custom threat signature
- D. QoS Profile to limit incoming requests
Answer: B
NEW QUESTION # 38
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudWatch
- B. CloudEvent
- C. CIoudTrail
- D. CloudLog
Answer: A,C
NEW QUESTION # 39
......
The PSE-PrismaCloud certification is an excellent way for IT professionals to demonstrate their expertise in cloud security and Prisma Cloud. By earning this certification, candidates can enhance their job prospects, increase their earning potential, and demonstrate their commitment to ongoing professional development in the field of cloud security.
The PSE-PrismaCloud Exam is intended for system engineers, architects, and technical personnel who are responsible for designing, implementing, and managing cloud security solutions. PSE-PrismaCloud exam covers a wide range of topics, including cloud security fundamentals, Prisma Cloud architecture, deployment and configuration, administration, and troubleshooting. Passing PSE-PrismaCloud exam validates the candidate's ability to design, implement, and manage Prisma Cloud solutions in a real-world environment, and demonstrates their commitment to staying current with the latest cloud security technologies and practices.
Palo Alto Networks PSE-PrismaCloud Real 2023 Braindumps Mock Exam Dumps: https://dumpsvce.exam4free.com/PSE-PrismaCloud-valid-dumps.html
