[Jan-2022] PSE-PrismaCloud Braindumps – PSE-PrismaCloud Questions to Get Better Grades
PSE-PrismaCloud Exam Dumps - Try Best PSE-PrismaCloud Exam Questions - DumpStillValid
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION 24
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. Custom threat signature
- B. DoS Protection Profile with specific session counts
- C. QoS Profile to limit incoming requests
- D. Zone Protection Profile
Answer: D
NEW QUESTION 25
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Expedition in the Customer Success Portal
- B. through Solution Templates in the Azure Marketplace
- C. through Iron Skillets in the GitHub Repository
- D. through ARM Templates in the GitHub Repository
Answer: A,D
NEW QUESTION 26
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- B. Support for the templates is available through Professional Services from Palo Alto Networks.
- C. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- D. Palo Alto Networks provides full support if a valid support license is in place.
Answer: A
NEW QUESTION 27
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Solution Templates in the Azure Marketplace
- B. through Expedition in the Customer Success Portal
- C. through Iron Skillets in the GitHub Repository
- D. through ARM Templates in the GitHub Repository
Answer: A,D
NEW QUESTION 28
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
Explanation
longest, shortest, path, lowest multi, lowest peer
NEW QUESTION 29
What are three examples of outbound traffic flow? (Choose three.)
- A. Microsoft Windows inside Azure requesting a security patch
- B. issue apt-get install command on an instance inside Amazon Web Services
- C. outgoing Prisma Public Cloud API calls
- D. web server inside Amazon Web Services receiving web requests from internet
- E. issue yum update command on an instance inside Amazon Web Services
Answer: A,B,C
NEW QUESTION 30
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)
- A. VM Monitoring
- B. External Dynamic List
- C. XML API
- D. CFT Template
Answer: A,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/
NEW QUESTION 31
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. License Key
- B. Auth Code
- C. CPU ID
- D. Serial Number
- E. UUID
Answer: B,C,D
NEW QUESTION 32
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be written in JSON or YAML
- B. CloudFormation is a declarative orchestration tool.
- C. CloudFormation is a procedural configuration management tool.
- D. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
Answer: A,B
NEW QUESTION 33
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Source Check is enabled and Destination Check is disabled
- B. Both Source and Destination Checks are disabled
- C. Source Check is disabled and Destination Check is enabled
- D. Both Source and Destination Checks are enabled
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us
NEW QUESTION 34
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
Answer: D
NEW QUESTION 35
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- A. Lambda
- B. CodeDeploy
- C. SNS
- D. SQS
Answer: A
NEW QUESTION 36
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. new Auth Code
- B. CPU ID
- C. UUID
- D. API Key
Answer: B,C
Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th
NEW QUESTION 37
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Generate a CIS compliance report and review the "Asset Summary."
- B. Open the Asset Dashboard, filter on tags: and choose "Private."
- C. Create an RQL network query to identify traffic from resources tagged "Private."
- D. Create an RQL config query to identify resources with the tag "Private."
Answer: B
NEW QUESTION 38
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. transit VPC and security VPC with VM-Series
- B. transit gateway and security VPC with VM-Series
- C. traditional active/standby HA on VM-Series
- D. iLB-as-next-hop
Answer: A,C
NEW QUESTION 39
Which cloud provider supports iLB-as-next-hop?
- A. Alibaba Cloud
- B. Oracle Cloud
- C. Amazon Web Services
- D. Microsoft Azure
Answer: D
NEW QUESTION 40
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. purchase a new PAYG license from a reseller
- B. launch a new VM using the PAYG image
- C. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- D. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
Answer: D
NEW QUESTION 41
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Border Customer Network
- B. NAT appliance
- C. Azure Stack Edge Router
- D. Public IP for the VM-Series NGFW
Answer: B
NEW QUESTION 42
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. notification templates
- B. RQL queries
- C. alert rules
- D. policies
Answer: D
NEW QUESTION 43
Match the logging service with its cloud provider.
Answer:
Explanation:
NEW QUESTION 44
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- B. purchase a new PAYG license from a reseller
- C. launch a new VM using the PAYG image
- D. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
Answer: C
NEW QUESTION 45
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- B. Group2 / SHA-1 / AES-128-CBC
- C. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- D. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- E. Group14 / SHA-256 / AES-256-GCM / IKE-V1
Answer: B,D,E
NEW QUESTION 46
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. Aperture Orchestration Engine
- B. VM Orchestration Policy Editor
- C. fully instrumented API
- D. support for Dynamic Address Groups
Answer: A,D
NEW QUESTION 47
Which three services can Google Cloud Security Scanner assess? (Choose three.)
- A. Google Kubernetes Engine
- B. BigQuery
- C. Google Virtual Private Cloud
- D. Compute Engine
- E. App Engine
Answer: A,D,E
NEW QUESTION 48
......
Verified PSE-PrismaCloud exam dumps Q&As with Correct 62 Questions and Answers: https://www.dumpstillvalid.com/PSE-PrismaCloud-prep4sure-review.html
Get New PSE-PrismaCloud Certification – Valid Exam Dumps Questions: https://drive.google.com/open?id=1TNiPMCgRhWPgDEQ70OVxCudWu0BAVEkT
