PSE-PrismaCloud Practice Test Questions Answers Updated 62 Questions [Q17-Q40]

4/5 - (1 vote)

PSE-PrismaCloud Practice Test Questions Answers Updated 62 Questions

PSE-PrismaCloud dumps & PSE-Prisma Cloud Professional Sure Practice with 62 Questions

NO.17 Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

HIPAA

CIS Benchmark

Payment Card Industry DSS V3

GDPR

NO.18 The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

Direct Connect

Fast Connect

IPsecVPN

ExpressRoute

Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

NO.19 can you create a custom compliance standard in Prisma Public Cloud?

Generate a new Compliance Report.

Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

From Compliance tab, clone a default framework and customize.

From Compliance tab > Compliance Standards, click “Add New.”

Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

NO.20 What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

VM-GCP

VM-100

VM-500

VM-300

Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

NO.21 A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

NO.22 What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

VM Monitoring

External Dynamic List

CFT Template

XML API

Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/

NO.23 How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

purchase a new PAYG license from a reseller

go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

launch a new VM using the PAYG image

NO.24 Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

Serial Number

CPU ID

Auth Code

License Key

UUID

NO.25 What is a permanent public IP called on Amazon Web Services?

Reserved IP

PIP

EIP

Floating IP

NO.26 An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

security group

tags

elastic ip address

source/destination checking

Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de

NO.27 Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?

network where source.publicnetwork IN (‘Suspicious IPs’) and dest.resource IN (resource where role IN (‘AWS RDS’, ‘Database’))

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest.resource IN (resource where role IN (‘LDAP’))

network where dest.resource IN (resource where role = ‘Database’}

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest resource IN (resource where role IN (‘AWS RDS’. ‘Database’))

NO.28 Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

Azure Application Insight

Resource Group

Azure Security Center

Bootstrapping

ARM Template

NO.29 A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

Custom threat signature

Zone Protection Profile

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

NO.30 What is the scope of the Amazon Web Services 1AM Service?

zonal

VPC

global

regional

NO.31 Which RQL string searches for all EBS volumes that do not have a “DataClassification” tag?

config where api.name = ‘aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*]key != DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*].key exists

config where api.name = ‘aws-ec2-describe-volumes’ AND json.rule = tags[*].key = 1

NO.32 Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

AWS CDN

AWS NAT Gateway

AWS ALB

AWS NLB

NO.33 The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

SNS

SQS

CodeDeploy

Lambda

NO.34 What is required for an EC2 instance to access the internet directly from an AWS VPC?

Internet Gateway

Transit Gateway

Virtual Private Gateway

Customer Gateway

NO.35 Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

NO.36 Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

HIPAA

CIS Benchmark

Payment Card Industry DSS V3

GDPR

NO.37 Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

NO.38 The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

The server VMs have private use only (RFC 1918) IPs. Amazon’s cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

NO.39 Match the query type with its corresponding search

Explanation
network where,
event where,
config where

NO.40 A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?