[Aug 18, 2022] PSE-PrismaCloud PDF Recently Updated Questions Dumps to Improve Exam Score
PSE-PrismaCloud Dumps Full Questions with Free PDF Questions to Pass
NEW QUESTION 35
What is Prisma Public Cloud licensing based on?
- A. number of accounts onboarded
- B. volume of flow logs consumed
- C. number of alerts generated
- D. number of monitored workloads
Answer: D
NEW QUESTION 36
Which change represents a VM-Series NGFW license transfer?
- A. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
- B. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
- C. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
- D. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
Answer: A
NEW QUESTION 37
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-300
- C. VM-500
- D. VM-100
Answer: B
NEW QUESTION 38
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- B. Generate a compliance report from the Compliance dashboard
- C. Write an RQL query from the "Investigate" tab.
- D. Configure an Inventory report from the "Alerts" tab
Answer: A,C
NEW QUESTION 39
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. tags
- B. source/destination checking
- C. elastic ip address
- D. security group
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION 40
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. HIPAA
- B. CIS Benchmark
- C. GDPR
- D. Payment Card Industry DSS V3
Answer: B
NEW QUESTION 41
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation is a declarative orchestration tool.
- B. CloudFormation templates can be written in JSON or YAML
- C. CloudFormation is a procedural configuration management tool.
- D. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
Answer: A,B
NEW QUESTION 42
Match the query type with its corresponding search
Answer:
Explanation:
NEW QUESTION 43
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- B. Generate a compliance report from the Compliance dashboard
- C. Write an RQL query from the "Investigate" tab.
- D. Configure an Inventory report from the "Alerts" tab
Answer: A,B
NEW QUESTION 44
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?
- A. Whitelist IP addresses.
- B. Create alert rules.
- C. Define enterprise settings.
- D. Configure User-ID.
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 45
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 46
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. source address translation
- B. port address translation
- C. destination address translation
- D. source and destination address translation
Answer: A
NEW QUESTION 47
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Both Source and Destination Checks are enabled
- B. Both Source and Destination Checks are disabled
- C. Source Check is disabled and Destination Check is enabled
- D. Source Check is enabled and Destination Check is disabled
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us
NEW QUESTION 48
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudEvent
- B. CIoudTrail
- C. CloudLog
- D. CloudWatch
Answer: B,D
NEW QUESTION 49
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Bootstrapping
- B. Azure Security Center
- C. ARM Template
- D. Resource Group
- E. Azure Application Insight
Answer: A,C,E
NEW QUESTION 50
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Create an RQL network query to identify traffic from resources tagged "Private."
- B. Open the Asset Dashboard, filter on tags: and choose "Private."
- C. Generate a CIS compliance report and review the "Asset Summary."
- D. Create an RQL config query to identify resources with the tag "Private."
Answer: A
NEW QUESTION 51
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-300
- C. VM-500
- D. VM-100
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 52
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
- C. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION 53
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. License Key
- B. UUID
- C. Serial Number
- D. CPU ID
- E. Auth Code
Answer: B,C,D
NEW QUESTION 54
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Security Groups
- B. Amazon Web Services WAF
- C. VM-Series firewalls
- D. Prisma SaaS
- E. Traps
Answer: A,C,D
NEW QUESTION 55
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group2 / SHA-1 / AES-128-CBC
- B. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- D. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-CBC / IKE-V1
Answer: A,B,C
NEW QUESTION 56
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?
- A. 10.0.3.1
- B. 10.0.2.1
- C. 10.0.1.254
- D. 10.0.3.255
Answer: A
NEW QUESTION 57
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
Explanation
longest, shortest, path, lowest multi, lowest peer
NEW QUESTION 58
......
100% Updated Palo Alto Networks PSE-PrismaCloud Enterprise PDF Dumps: https://www.realexamfree.com/PSE-PrismaCloud-real-exam-dumps.html
Free PSE-Prisma Cloud Professional PSE-PrismaCloud Official Cert Guide PDF Download: https://drive.google.com/open?id=13Aw-SUGvNCefCUQU9T2c5c2-ayLTSgIX
