[Nov-2021] PSE-PrismaCloud Exam Questions and Valid PSE-PrismaCloud Dumps PDF
PSE-PrismaCloud Brain Dump: A Study Guide with Tips & Tricks for passing Exam
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION 13
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. NAT appliance
- B. Azure Stack Edge Router
- C. Public IP for the VM-Series NGFW
- D. Border Customer Network
Answer: A
NEW QUESTION 14
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)
- A. Google Cloud Platform
- B. Amazon Web Services
- C. Microsoft Azure
- D. Oracle Cloud
Answer: A,D
NEW QUESTION 15
How can you create a custom compliance standard in Prisma Public Cloud?
- A. From Compliance tab, clone a default framework and customize.
- B. Generate a new Compliance Report.
- C. From Compliance tab > Compliance Standards, click "Add New."
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 16
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- B. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- C. purchase a new PAYG license from a reseller
- D. launch a new VM using the PAYG image
Answer: D
NEW QUESTION 17
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 18
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- A. Excessive login failures
- B. Account hijacking attempts
- C. Unusual user activity
- D. Denial-of-service activity
- E. Suspicious file activity
Answer: A,B,C
Explanation:
Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 19
Which Google Cloud Platform project shares its VPC networks with other projects?
- A. Subscribing project
- B. Service project
- C. Host project
- D. Admin project
Answer: C
Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 20
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Azure Application Insight
- B. Resource Group
- C. Azure Security Center
- D. Bootstrapping
- E. ARM Template
Answer: A,D,E
NEW QUESTION 21
What is Prisma Public Cloud licensing based on?
- A. number of alerts generated
- B. volume of flow logs consumed
- C. number of accounts onboarded
- D. number of monitored workloads
Answer: D
NEW QUESTION 22
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- B. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- C. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
Answer: A
NEW QUESTION 23
How can you modify a range of dates default policy in Prisma Public Cloud?
- A. Manually create the RQL statement.
- B. Clone the existing policy and change the value.
- C. Click the Gear icon next to the policy name to open the Edit Policy dialog
- D. Override the value and commit the configuration.
Answer: B
NEW QUESTION 24
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- C. launch a new VM using the PAYG image
- D. purchase a new PAYG license from a reseller
Answer: A
NEW QUESTION 25
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
Explanation
backup, register, deploy, activate, load
NEW QUESTION 26
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. tags
- B. security group
- C. elastic ip address
- D. source/destination checking
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION 27
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- B. Clone the predefined Strict Profile, with packet capture settings disabled
- C. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
- D. Clone the predefined Strict Profile, with packet capture settings enabled
Answer: C
NEW QUESTION 28
Which cloud provider supports iLB-as-next-hop?
- A. Amazon Web Services
- B. Alibaba Cloud
- C. Oracle Cloud
- D. Microsoft Azure
Answer: D
NEW QUESTION 29
Match the logging service with its cloud provider.
Answer:
Explanation:
NEW QUESTION 30
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- B. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- C. Palo Alto Networks provides full support if a valid support license is in place.
- D. Support for the templates is available through Professional Services from Palo Alto Networks.
Answer: B
NEW QUESTION 31
......
PSE-PrismaCloud Exam Questions: Free PDF Download Recently Updated Questions: https://www.validtorrent.com/PSE-PrismaCloud-valid-exam-torrent.html
PSE-PrismaCloud Certification Exam Dumps with 62 Practice Test Questions: https://drive.google.com/open?id=188_5CmCVMhj-knGar_GKgGoFUbvJhGxe