[2021] PSE-PrismaCloud Answers PSE-PrismaCloud Free Demo Are Based On The Real Exam
PSE-PrismaCloud [Dec-2021 Newly Released] Exam Questions For You To Pass
NEW QUESTION 33
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?
- A. set mgmt-interface swap yes
- B. set system setting mgmt-interface swap yes
- C. set system setting mgmt-interface-swap enable yes
- D. set mgmt-interface settings swap yes
Answer: C
NEW QUESTION 34
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
NEW QUESTION 35
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. purchase a new PAYG license from a reseller
- B. launch a new VM using the PAYG image
- C. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- D. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
Answer: B
NEW QUESTION 36
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?
- A. 10.0.1.254
- B. 10.0.2.1
- C. 10.0.3.1
- D. 10.0.3.255
Answer: C
NEW QUESTION 37
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
- A. event where
- B. compliance where
- C. network where
- D. config where
- E. user where
Answer: A,B,C
NEW QUESTION 38
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be written in JSON or YAML
- B. CloudFormation is a procedural configuration management tool.
- C. CloudFormation is a declarative orchestration tool.
- D. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
Answer: A,D
NEW QUESTION 39
Match the logging service with its cloud provider.
Answer:
Explanation:
Explanation
AWS, Azure, GCP, Azure, AWS, GCP
NEW QUESTION 40
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?
- A. Clone the predefined Strict Profile, with packet capture settings enabled
- B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
Answer: A
NEW QUESTION 41
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- B. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- D. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- E. Group2 / SHA-1 / AES-128-CBC
Answer: A,B
NEW QUESTION 42
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. QoS Profile to limit incoming requests
- B. DoS Protection Profile with specific session counts
- C. Zone Protection Profile
- D. Custom threat signature
Answer: C
NEW QUESTION 43
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Create an RQL network query to identify traffic from resources tagged "Private."
- B. Open the Asset Dashboard, filter on tags: and choose "Private."
- C. Generate a CIS compliance report and review the "Asset Summary."
- D. Create an RQL config query to identify resources with the tag "Private."
Answer: A
NEW QUESTION 44
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-300
- C. VM-500
- D. VM-100
Answer: B
NEW QUESTION 45
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudWatch
- B. CloudEvent
- C. CloudLog
- D. CIoudTrail
Answer: A,D
NEW QUESTION 46
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- B. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
- C. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- D. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
Answer: D
NEW QUESTION 47
Which cloud provider supports iLB-as-next-hop?
- A. Amazon Web Services
- B. Oracle Cloud
- C. Alibaba Cloud
- D. Microsoft Azure
Answer: A
NEW QUESTION 48
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Amazon Web Services WAF
- B. VM-Series firewalls
- C. Traps
- D. Prisma SaaS
- E. Security Groups
Answer: B,D,E
NEW QUESTION 49
What is Prisma Public Cloud licensing based on?
- A. volume of flow logs consumed
- B. number of accounts onboarded
- C. number of monitored workloads
- D. number of alerts generated
Answer: C
NEW QUESTION 50
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. policies
- B. notification templates
- C. alert rules
- D. RQL queries
Answer: A
NEW QUESTION 51
What are three examples of outbound traffic flow? (Choose three.)
- A. issue apt-get install command on an instance inside Amazon Web Services
- B. issue yum update command on an instance inside Amazon Web Services
- C. Microsoft Windows inside Azure requesting a security patch
- D. outgoing Prisma Public Cloud API calls
- E. web server inside Amazon Web Services receiving web requests from internet
Answer: A,C,D
NEW QUESTION 52
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- B. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Clone the predefined Strict Profile, with packet capture settings enabled
Answer: B
NEW QUESTION 53
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
- C. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION 54
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Customer Gateway
- B. Virtual Private Gateway
- C. Internet Gateway
- D. Transit Gateway
Answer: C
NEW QUESTION 55
Which Prisma Public Cloud policy alerts administrators to unusual user activity?
- A. Audit Event
- B. Anomaly
- C. Network
- D. Configuration
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 56
......
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
New 2021 Realistic Free Palo Alto Networks PSE-PrismaCloud Exam Dump Questions & Answer: https://www.dumpstests.com/PSE-PrismaCloud-latest-test-dumps.html
Palo Alto Networks PSE-PrismaCloud Exam: Basic Questions With Answers: https://drive.google.com/open?id=1qJv9HJfX-PBwf9cjSa7cpAZ-mT0scCsF