Download Palo Alto Networks PSE-PrismaCloud Mock Test Study Material
PSE-PrismaCloud Questions Prepare with Learning Information
NEW QUESTION # 36
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Inspector
- B. Amazon Web Services WAF
- C. GuardDuty
- D. Shield
Answer: C
Explanation:
Explanation
http://www.paloguard.com/datasheets/prisma-cloud-on-aws.pdf
NEW QUESTION # 37
How is license utilization displayed within the Prisma Public Cloud interface?
- A. navigate to Settings (via the gear icon) > Licensing
- B. navigate to General > Licensing
- C. navigate to Dashboard > Asset Inventory
- D. navigate to the CLI and run show license command
Answer: A
NEW QUESTION # 38
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Create an RQL config query to identify resources with the tag "Private."
- B. Open the Asset Dashboard, filter on tags: and choose "Private."
- C. Generate a CIS compliance report and review the "Asset Summary."
- D. Create an RQL network query to identify traffic from resources tagged "Private."
Answer: D
NEW QUESTION # 39
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. Payment Card Industry 3.0
- B. GDPR
- C. EU Data Protection Directive 95/46/EC
- D. ISO 27001
Answer: C
NEW QUESTION # 40
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
NEW QUESTION # 41
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
Answer: D
NEW QUESTION # 42
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. CIS Benchmark
- B. Payment Card Industry DSS V3
- C. GDPR
- D. HIPAA
Answer: C
NEW QUESTION # 43
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
- B. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- C. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- D. create a bootstrap file that includes the mgmt-interface-swap command
Answer: A,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 44
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. Aperture Orchestration Engine
- B. fully instrumented API
- C. support for Dynamic Address Groups
- D. VM Orchestration Policy Editor
Answer: B,C
NEW QUESTION # 45
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. ARM Template
- B. Resource Group
- C. Azure Application Insight
- D. Bootstrapping
- E. Azure Security Center
Answer: C,D,E
NEW QUESTION # 46
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- B. purchase a new PAYG license from a reseller
- C. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- D. launch a new VM using the PAYG image
Answer: D
NEW QUESTION # 47
Which cloud provider supports iLB-as-next-hop?
- A. Oracle Cloud
- B. Microsoft Azure
- C. Alibaba Cloud
- D. Amazon Web Services
Answer: B
NEW QUESTION # 48
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
Answer: C
NEW QUESTION # 49
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Amazon Web Services WAF
- B. Shield
- C. GuardDuty
- D. Inspector
Answer: D
NEW QUESTION # 50
Match the logging service with its cloud provider.
Answer:
Explanation:
NEW QUESTION # 51
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- B. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
- C. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- D. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
Answer: A
NEW QUESTION # 52
......
Most Reliable Palo Alto Networks PSE-PrismaCloud Training Materials: https://www.prep4away.com/Palo-Alto-Networks-certification/braindumps.PSE-PrismaCloud.ete.file.html
Practice Material for PSE-PrismaCloud Exam Question Preparation: https://drive.google.com/open?id=1At7yn6HnajIk-dDvRyfWCHdP9SU1AVPK