(PDF) PSE-Prisma Cloud Professional PSE-PrismaCloud Exam and Certification Test Engine
Use PSE-PrismaCloud Exam Dumps (2022 PDF Dumps) To Have Reliable PSE-PrismaCloud Test Engine
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
NEW QUESTION 15
Match the query type with its corresponding search
Answer:
Explanation:
Explanation
network where,
event where,
config where
NEW QUESTION 16
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Public IP for the VM-Series NGFW
- B. Azure Stack Edge Router
- C. NAT appliance
- D. Border Customer Network
Answer: B
NEW QUESTION 17
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. transit gateway and security VPC with VM-Series
- B. traditional active/standby HA on VM-Series
- C. iLB-as-next-hop
- D. transit VPC and security VPC with VM-Series
Answer: B,D
NEW QUESTION 18
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Answer:
Explanation:
Explanation
longest, shortest, path, lowest multi, lowest peer
NEW QUESTION 19
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
- B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- C. create a bootstrap file that includes the mgmt-interface-swap command
- D. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
Answer: A,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 20
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be written in JSON or YAML
- B. CloudFormation is a procedural configuration management tool.
- C. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- D. CloudFormation is a declarative orchestration tool.
Answer: A,D
NEW QUESTION 21
can you create a custom compliance standard in Prisma Public Cloud?
- A. From Compliance tab > Compliance Standards, click "Add New."
- B. Generate a new Compliance Report.
- C. From Compliance tab, clone a default framework and customize.
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 22
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- B. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- C. Support for the templates is available through Professional Services from Palo Alto Networks.
- D. Palo Alto Networks provides full support if a valid support license is in place.
Answer: B
NEW QUESTION 23
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Generate a CIS compliance report and review the "Asset Summary."
- B. Create an RQL network query to identify traffic from resources tagged "Private."
- C. Create an RQL config query to identify resources with the tag "Private."
- D. Open the Asset Dashboard, filter on tags: and choose "Private."
Answer: D
NEW QUESTION 24
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION 25
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
Answer: D
NEW QUESTION 26
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Amazon Web Services WAF
- B. VM-Series firewalls
- C. Traps
- D. Prisma SaaS
- E. Security Groups
Answer: B,D,E
NEW QUESTION 27
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- B. Generate a compliance report from the Compliance dashboard
- C. Write an RQL query from the "Investigate" tab.
- D. Configure an Inventory report from the "Alerts" tab
Answer: A,C
NEW QUESTION 28
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group2 / SHA-1 / AES-128-CBC
- B. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- D. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-GCM / IKE-V1
Answer: A,B,E
NEW QUESTION 29
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. GDPR
- B. ISO 27001
- C. EU Data Protection Directive 95/46/EC
- D. Payment Card Industry 3.0
Answer: C
NEW QUESTION 30
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Customer Gateway
- B. Virtual Private Gateway
- C. Internet Gateway
- D. Transit Gateway
Answer: C
NEW QUESTION 31
Which cloud provider supports iLB-as-next-hop?
- A. Amazon Web Services
- B. Oracle Cloud
- C. Alibaba Cloud
- D. Microsoft Azure
Answer: A
NEW QUESTION 32
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Transit Gateway
- B. Customer Gateway
- C. Internet Gateway
- D. Virtual Private Gateway
Answer: A
NEW QUESTION 33
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. policies
- B. notification templates
- C. alert rules
- D. RQL queries
Answer: A
NEW QUESTION 34
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
- A. event where
- B. compliance where
- C. network where
- D. config where
- E. user where
Answer: A,B,C
NEW QUESTION 35
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 36
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Bootstrapping
- B. Azure Application Insight
- C. Resource Group
- D. Azure Security Center
- E. ARM Template
Answer: A,B,D
NEW QUESTION 37
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Bootstrapping
- B. Azure Application Insight
- C. Resource Group
- D. Azure Security Center
- E. ARM Template
Answer: A,B,E
NEW QUESTION 38
......
PSE-PrismaCloud Dumps Full Questions with Free PDF Questions to Pass: https://www.realvce.com/PSE-PrismaCloud_free-dumps.html
PSE-PrismaCloud PDF Recently Updated Questions Dumps to Improve Exam Score: https://drive.google.com/open?id=1Jn_avCX5ZmWk0Q6bRqQGuRnfwqG7VdOd