Pass Your Palo Alto Networks PSE-PrismaCloud Exam with Correct 62 Questions and Answers
Latest [Apr 02, 2022] 2022 Realistic Verified PSE-PrismaCloud Dumps
NEW QUESTION 36
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. CPU ID
- B. API Key
- C. new Auth Code
- D. UUID
Answer: B,C
Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th
NEW QUESTION 37
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Border Customer Network
- B. NAT appliance
- C. Azure Stack Edge Router
- D. Public IP for the VM-Series NGFW
Answer: B
NEW QUESTION 38
What are three examples of outbound traffic flow? (Choose three.)
- A. Microsoft Windows inside Azure requesting a security patch
- B. issue apt-get install command on an instance inside Amazon Web Services
- C. outgoing Prisma Public Cloud API calls
- D. web server inside Amazon Web Services receiving web requests from internet
- E. issue yum update command on an instance inside Amazon Web Services
Answer: A,B,C
NEW QUESTION 39
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Azure Security Center
- B. ARM Template
- C. Azure Application Insight
- D. Bootstrapping
- E. Resource Group
Answer: B,C,D
NEW QUESTION 40
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
- A. config where
- B. compliance where
- C. event where
- D. user where
- E. network where
Answer: B,C,E
NEW QUESTION 41
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
Explanation
longest, shortest, path, lowest multi, lowest peer
NEW QUESTION 42
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. Custom threat signature
- B. DoS Protection Profile with specific session counts
- C. QoS Profile to limit incoming requests
- D. Zone Protection Profile
Answer: D
NEW QUESTION 43
How is license utilization displayed within the Prisma Public Cloud interface?
- A. navigate to Dashboard > Asset Inventory
- B. navigate to General > Licensing
- C. navigate to Settings (via the gear icon) > Licensing
- D. navigate to the CLI and run show license command
Answer: C
NEW QUESTION 44
What are three examples of outbound traffic flow? (Choose three.)
- A. issue apt-get install command on an instance inside Amazon Web Services
- B. outgoing Prisma Public Cloud API calls
- C. web server inside Amazon Web Services receiving web requests from internet
- D. issue yum update command on an instance inside Amazon Web Services
- E. Microsoft Windows inside Azure requesting a security patch
Answer: A,B,D
NEW QUESTION 45
Which Google Cloud Platform project shares its VPC networks with other projects?
- A. Host project
- B. Admin project
- C. Subscribing project
- D. Service project
Answer: A
Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 46
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Generate a CIS compliance report and review the "Asset Summary."
- B. Open the Asset Dashboard, filter on tags: and choose "Private."
- C. Create an RQL config query to identify resources with the tag "Private."
- D. Create an RQL network query to identify traffic from resources tagged "Private."
Answer: D
NEW QUESTION 47
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
- A. event where
- B. compliance where
- C. user where
- D. network where
- E. config where
Answer: A,D,E
NEW QUESTION 48
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. HIPAA
- B. GDPR
- C. CIS Benchmark
- D. Payment Card Industry DSS V3
Answer: B
NEW QUESTION 49
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- A. Lambda
- B. CodeDeploy
- C. SNS
- D. SQS
Answer: A
NEW QUESTION 50
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-300
- B. VM-100
- C. VM-500
- D. VM-GCP
Answer: A
NEW QUESTION 51
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. NAT appliance
- B. Border Customer Network
- C. Azure Stack Edge Router
- D. Public IP for the VM-Series NGFW
Answer: C
NEW QUESTION 52
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. GDPR
- B. EU Data Protection Directive 95/46/EC
- C. Payment Card Industry 3.0
- D. ISO 27001
Answer: B
NEW QUESTION 53
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Internet Gateway
- B. Transit Gateway
- C. Customer Gateway
- D. Virtual Private Gateway
Answer: B
NEW QUESTION 54
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
NEW QUESTION 55
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?
- A. set system setting mgmt-interface-swap enable yes
- B. set mgmt-interface settings swap yes
- C. set mgmt-interface swap yes
- D. set system setting mgmt-interface swap yes
Answer: A
NEW QUESTION 56
Match the logging service with its cloud provider.
Answer:
Explanation:
NEW QUESTION 57
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
NEW QUESTION 58
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- A. Unusual user activity
- B. Account hijacking attempts
- C. Suspicious file activity
- D. Denial-of-service activity
- E. Excessive login failures
Answer: A,B,E
Explanation:
Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 59
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- B. Support for the templates is available through Professional Services from Palo Alto Networks.
- C. Palo Alto Networks provides full support if a valid support license is in place.
- D. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
Answer: D
NEW QUESTION 60
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Source Check is enabled and Destination Check is disabled
- B. Both Source and Destination Checks are disabled
- C. Source Check is disabled and Destination Check is enabled
- D. Both Source and Destination Checks are enabled
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us
NEW QUESTION 61
......
Get 2022 Updated Free Palo Alto Networks PSE-PrismaCloud Exam Questions and Answer: https://www.actualpdf.com/PSE-PrismaCloud_exam-dumps.html
Pass PSE-PrismaCloud Exam Updated 62 Questions: https://drive.google.com/open?id=1KYhdDQxZ45NAtI30ptuQAheYta6DSyLk
