New 2024 Latest Questions PSE-PrismaCloud Dumps - Use Updated Palo Alto Networks Exam
Latest PSE-PrismaCloud Exam Dumps Palo Alto Networks Exam from Training Expert RealExamFree
NEW QUESTION # 69
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?
- A. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
- B. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))
- C. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
- D. network where dest.resource IN (resource where role = 'Database'}
Answer: C
NEW QUESTION # 70
Which subcommand invokes the scan for images built with Jenkins in an OpenShift environment?
- A. > twistcli hosts scan
- B. > twistcli project scan
- C. > twistcli scar, hosts
- D. > twistcli scar, projects
Answer: B
NEW QUESTION # 71
What are two valid image identifiers to designate trust? (Choose two.)
- A. repo
- B. base layer
- C. registry
- D. trusted publisher
Answer: C,D
NEW QUESTION # 72
can you create a custom compliance standard in Prisma Public Cloud?
- A. Generate a new Compliance Report.
- B. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
- C. From Compliance tab, clone a default framework and customize.
- D. From Compliance tab > Compliance Standards, click "Add New."
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION # 73
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Create an RQL config query to identify resources with the tag "Private."
- B. Create an RQL network query to identify traffic from resources tagged "Private."
- C. Generate a CIS compliance report and review the "Asset Summary."
- D. Open the Asset Dashboard, filter on tags: and choose "Private."
Answer: B
NEW QUESTION # 74
Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)
- A. Azure
- B. IBM Cloud
- C. Oracle Cloud
- D. DigitalOcean
Answer: A,C
NEW QUESTION # 75
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. Aperture Orchestration Engine
- B. support for Dynamic Address Groups
- C. fully instrumented API
- D. VM Orchestration Policy Editor
Answer: B,C
NEW QUESTION # 76
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-500
- C. VM-300
- D. VM-100
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 77
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- B. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- C. create a bootstrap file that includes the mgmt-interface-swap command
- D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 78
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- B. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC
- D. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-GCM / IKE-V1
Answer: B,D
NEW QUESTION # 79
Which two template formats are supported by the Prisma Cloud infrastructure as code (laC) scan service?
(Choose two.)
- A. JSON
- B. ARM
- C. YAML
- D. XML
Answer: B,C
NEW QUESTION # 80
Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?
- A. Event from cloud.autid_logs where cloud.type = "gcp" AND cloud.service = "bigquery.googleapis.com"
- B. Event from cloud.audit_logs where cloud.service = "Google Bisquery Dataset"
- C. Event from cloud.audit_logs where cloud.type = "gcp"
- D. Event from cloud.audit_logs where cloud.type = "grep" AND cloud.service = "Google Bigtable Instance"
Answer: A
NEW QUESTION # 81
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Both Source and Destination Checks are disabled
- B. Both Source and Destination Checks are enabled
- C. Source Check is disabled and Destination Check is enabled
- D. Source Check is enabled and Destination Check is disabled
Answer: A
Explanation:
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws
/use-case-secure-the-ec2-instances-in-the-aws-cloud
NEW QUESTION # 82
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?
- A. Whitelist IP addresses.
- B. Create alert rules.
- C. Configure User-ID.
- D. Define enterprise settings.
Answer: D
Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html
NEW QUESTION # 83
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CIoudTrail
- B. CloudWatch
- C. CloudLog
- D. CloudEvent
Answer: A,B
NEW QUESTION # 84
Match the logging service with its cloud provider.
Answer:
Explanation:
Explanation
AWS, Azure, GCP, Azure, AWS, GCP
NEW QUESTION # 85
What does Prisma Cloud execute to change public cloud infrastructure when autoremediation is enabled?
- A. local scripts to public cloud APIs
- B. public cloud CLI commands
- C. remote function calls to host agents
- D. third-party integration tools
Answer: C
NEW QUESTION # 86
How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?
- A. It inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found.
- B. It uses machine learning (ML) to identify unusual changes to infrastructure.
- C. It makes changes after a policy violation has been identified in monitoring.
- D. It locks all changes to public cloud infrastructure and stops any configuration changes without prior approval.
Answer: C
NEW QUESTION # 87
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
Explanation
longest, shortest, path, lowest multi, lowest peer
NEW QUESTION # 88
......
Updated Test Engine to Practice PSE-PrismaCloud Dumps & Practice Exam: https://www.realexamfree.com/PSE-PrismaCloud-real-exam-dumps.html
Pass Palo Alto Networks PSE-PrismaCloud PDF Dumps Recently Updated 115 Questions: https://drive.google.com/open?id=1qkSVstDC4POcQVcdbifaCs_fdvNOHIe_
