PSE-PrismaCloud Training & Certification Get Latest PSE-Prisma Cloud Professional Updated on Dec 06, 2023
Certification Training for PSE-PrismaCloud Exam Dumps Test Engine
Palo Alto Networks PSE-PrismaCloud exam is an excellent opportunity for system engineers to demonstrate their expertise in managing and securing cloud environments. PSE Palo Alto Networks System Engineer Professional - Prisma Cloud certification is intended to help professionals stand out in a competitive job market and demonstrate their skills and knowledge to potential employers. Candidates are encouraged to prepare thoroughly before taking the exam to ensure they have the knowledge and skills necessary to pass.
NEW QUESTION # 20
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- B. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- D. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-CBC
Answer: A,B
NEW QUESTION # 21
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. CPU ID
- B. Serial Number
- C. UUID
- D. Auth Code
- E. License Key
Answer: A,B,C
NEW QUESTION # 22
Match the logging service with its cloud provider.
Answer:
Explanation:
Explanation
AWS, Azure, GCP, Azure, AWS, GCP
NEW QUESTION # 23
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- A. AWS ALB
- B. AWS CDN
- C. AWS NLB
- D. AWS NAT Gateway
Answer: B,D
NEW QUESTION # 24
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- B. launch a new VM using the PAYG image
- C. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- D. purchase a new PAYG license from a reseller
Answer: C
NEW QUESTION # 25
Which change represents a VM-Series NGFW license transfer?
- A. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
- B. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
- C. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
- D. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
Answer: D
NEW QUESTION # 26
Which cloud provider supports iLB-as-next-hop?
- A. Microsoft Azure
- B. Amazon Web Services
- C. Alibaba Cloud
- D. Oracle Cloud
Answer: A
NEW QUESTION # 27
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudLog
- B. CloudEvent
- C. CloudWatch
- D. CIoudTrail
Answer: C,D
NEW QUESTION # 28
Which Google Cloud Platform project shares its VPC networks with other projects?
- A. Service project
- B. Subscribing project
- C. Admin project
- D. Host project
Answer: D
Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 29
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. elastic ip address
- B. tags
- C. source/destination checking
- D. security group
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION # 30
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. transit gateway and security VPC with VM-Series
- B. traditional active/standby HA on VM-Series
- C. iLB-as-next-hop
- D. transit VPC and security VPC with VM-Series
Answer: A,B
NEW QUESTION # 31
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. GDPR
- B. Payment Card Industry 3.0
- C. EU Data Protection Directive 95/46/EC
- D. ISO 27001
Answer: A
NEW QUESTION # 32
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
- D. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION # 33
Match the query type with its corresponding search
Answer:
Explanation:
NEW QUESTION # 34
Which Prisma Public Cloud policy alerts administrators to unusual user activity?
- A. Anomaly
- B. Audit Event
- C. Configuration
- D. Network
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION # 35
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- C. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- D. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
Answer: D
NEW QUESTION # 36
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
Answer: C
NEW QUESTION # 37
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION # 38
How is license utilization displayed within the Prisma Public Cloud interface?
- A. navigate to Settings (via the gear icon) > Licensing
- B. navigate to the CLI and run show license command
- C. navigate to General > Licensing
- D. navigate to Dashboard > Asset Inventory
Answer: A
NEW QUESTION # 39
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. HIPAA
- B. GDPR
- C. CIS Benchmark
- D. Payment Card Industry DSS V3
Answer: B
NEW QUESTION # 40
......
Step by Step Guide to Prepare for PSE-PrismaCloud Exam: https://www.actualtestsquiz.com/PSE-PrismaCloud-test-torrent.html
PSE-Prisma Cloud Professional PSE-PrismaCloud Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1QajK2tmZLGMxMmpW1jCtjTqoEwj8FNTW
