2023 Updated PSE-PrismaCloud PDF for the PSE-PrismaCloud Tests Free Updated Today!
Fully Updated Dumps PDF - Latest PSE-PrismaCloud Exam Questions and Answers
NEW QUESTION # 37
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- A. CodeDeploy
- B. SNS
- C. Lambda
- D. SQS
Answer: C
NEW QUESTION # 38
Which cloud provider supports iLB-as-next-hop?
- A. Microsoft Azure
- B. Amazon Web Services
- C. Oracle Cloud
- D. Alibaba Cloud
Answer: B
NEW QUESTION # 39
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
- B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- C. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- D. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
Answer: B
NEW QUESTION # 40
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. source address translation
- B. destination address translation
- C. port address translation
- D. source and destination address translation
Answer: A
NEW QUESTION # 41
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Support for the templates is available through Professional Services from Palo Alto Networks.
- B. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- C. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- D. Palo Alto Networks provides full support if a valid support license is in place.
Answer: B
NEW QUESTION # 42
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?
- A. software as code
- B. platform as a service
- C. infrastructure as code
- D. infrastructure as a service
Answer: D
NEW QUESTION # 43
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Bootstrapping
- B. Resource Group
- C. Azure Application Insight
- D. ARM Template
- E. Azure Security Center
Answer: A,C,E
NEW QUESTION # 44
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. fully instrumented API
- B. Aperture Orchestration Engine
- C. VM Orchestration Policy Editor
- D. support for Dynamic Address Groups
Answer: B,D
NEW QUESTION # 45
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Shield
- B. GuardDuty
- C. Amazon Web Services WAF
- D. Inspector
Answer: B
Explanation:
Explanation
http://www.paloguard.com/datasheets/prisma-cloud-on-aws.pdf
NEW QUESTION # 46
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?
- A. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- B. Clone the predefined Strict Profile, with packet capture settings disabled
- C. Clone the predefined Strict Profile, with packet capture settings enabled
- D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
Answer: C
NEW QUESTION # 47
What are three examples of outbound traffic flow? (Choose three.)
- A. Microsoft Windows inside Azure requesting a security patch
- B. web server inside Amazon Web Services receiving web requests from internet
- C. issue yum update command on an instance inside Amazon Web Services
- D. outgoing Prisma Public Cloud API calls
- E. issue apt-get install command on an instance inside Amazon Web Services
Answer: A,D,E
NEW QUESTION # 48
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- B. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- C. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
Answer: B
NEW QUESTION # 49
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
Explanation
longest, shortest, path, lowest multi, lowest peer
NEW QUESTION # 50
What is the scope of the Amazon Web Services IAM Service?
- A. VPC
- B. zonal
- C. global
- D. regional
Answer: C
NEW QUESTION # 51
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- B. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- D. Group2 / SHA-1 / AES-128-CBC
- E. Group2 / SHA-1 / AES-128-GCM / IKE-V1
Answer: A,B
NEW QUESTION # 52
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-300
- C. VM-500
- D. VM-100
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 53
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Create an RQL network query to identify traffic from resources tagged "Private."
- B. Create an RQL config query to identify resources with the tag "Private."
- C. Generate a CIS compliance report and review the "Asset Summary."
- D. Open the Asset Dashboard, filter on tags: and choose "Private."
Answer: A
NEW QUESTION # 54
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Create an RQL config query to identify resources with the tag "Private."
- B. Generate a CIS compliance report and review the "Asset Summary."
- C. Create an RQL network query to identify traffic from resources tagged "Private."
- D. Open the Asset Dashboard, filter on tags: and choose "Private."
Answer: D
NEW QUESTION # 55
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 56
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. ExpressRoute
- B. Direct Connect
- C. IPsecVPN
- D. Fast Connect
Answer: A,C
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
NEW QUESTION # 57
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Solution Templates in the Azure Marketplace
- B. through Iron Skillets in the GitHub Repository
- C. through ARM Templates in the GitHub Repository
- D. through Expedition in the Customer Success Portal
Answer: C,D
NEW QUESTION # 58
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION # 59
Which Prisma Public Cloud policy alerts administrators to unusual user activity?
- A. Configuration
- B. Network
- C. Audit Event
- D. Anomaly
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION # 60
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- B. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- C. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- D. Group2 / SHA-1 / AES-128-CBC
- E. Group2 / SHA-1 / AES-128-GCM / IKE-V1
Answer: A,D,E
NEW QUESTION # 61
How can you modify a range of dates default policy in Prisma Public Cloud?
- A. Clone the existing policy and change the value.
- B. Manually create the RQL statement.
- C. Override the value and commit the configuration.
- D. Click the Gear icon next to the policy name to open the Edit Policy dialog
Answer: A
NEW QUESTION # 62
......
Free PSE-PrismaCloud Exam Questions PSE-PrismaCloud Actual Free Exam Questions: https://www.dumps4pdf.com/PSE-PrismaCloud-valid-braindumps.html
100% Free PSE-PrismaCloud Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=126Z-SeCrmFKBMafO8fqKS56wtJPEWjAV