PSE-PrismaCloud Dumps To Pass PSE-Prisma Cloud Professional Exam in One Day (Updated 62 Questions)
PSE-PrismaCloud Exam Brain Dumps - Study Notes and Theory
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 18
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- B. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- C. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- D. Group2 / SHA-1 / AES-128-CBC
- E. Group2 / SHA-1 / AES-128-CBC / IKE-V1
Answer: A,C
NEW QUESTION 19
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)
- A. Microsoft Azure
- B. Oracle Cloud
- C. Google Cloud Platform
- D. Amazon Web Services
Answer: B,C
NEW QUESTION 20
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Inspector
- B. Amazon Web Services WAF
- C. Shield
- D. GuardDuty
Answer: D
Explanation:
Explanation
http://www.paloguard.com/datasheets/prisma-cloud-on-aws.pdf
NEW QUESTION 21
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Internet Gateway
- B. Virtual Private Gateway
- C. Customer Gateway
- D. Transit Gateway
Answer: D
NEW QUESTION 22
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?
- A. Define enterprise settings.
- B. Whitelist IP addresses.
- C. Create alert rules.
- D. Configure User-ID.
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 23
Which Google Cloud Platform project shares its VPC networks with other projects?
- A. Host project
- B. Subscribing project
- C. Service project
- D. Admin project
Answer: A
Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 24
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- C. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
- D. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
Answer: D
NEW QUESTION 25
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION 26
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- B. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- C. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- D. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
Answer: D
NEW QUESTION 27
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Palo Alto Networks provides full support if a valid support license is in place.
- B. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- C. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- D. Support for the templates is available through Professional Services from Palo Alto Networks.
Answer: C
NEW QUESTION 28
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. Auth Code
- B. CPU ID
- C. License Key
- D. Serial Number
- E. UUID
Answer: B,D,E
NEW QUESTION 29
What is Prisma Public Cloud licensing based on?
- A. volume of flow logs consumed
- B. number of alerts generated
- C. number of accounts onboarded
- D. number of monitored workloads
Answer: D
NEW QUESTION 30
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- A. AWS CDN
- B. AWS NLB
- C. AWS NAT Gateway
- D. AWS ALB
Answer: A,C
NEW QUESTION 31
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Azure Application Insight
- B. ARM Template
- C. Bootstrapping
- D. Resource Group
- E. Azure Security Center
Answer: A,C,E
NEW QUESTION 32
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Expedition in the Customer Success Portal
- B. through Iron Skillets in the GitHub Repository
- C. through Solution Templates in the Azure Marketplace
- D. through ARM Templates in the GitHub Repository
Answer: A,D
NEW QUESTION 33
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Palo Alto Networks provides full support if a valid support license is in place.
- B. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- C. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- D. Support for the templates is available through Professional Services from Palo Alto Networks.
Answer: B
NEW QUESTION 34
How can you modify a range of dates default policy in Prisma Public Cloud?
- A. Clone the existing policy and change the value.
- B. Override the value and commit the configuration.
- C. Manually create the RQL statement.
- D. Click the Gear icon next to the policy name to open the Edit Policy dialog
Answer: A
NEW QUESTION 35
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)
- A. VM Monitoring
- B. XML API
- C. External Dynamic List
- D. CFT Template
Answer: A,B
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/
NEW QUESTION 36
Match the query type with its corresponding search
Answer:
Explanation:
NEW QUESTION 37
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Expedition in the Customer Success Portal
- B. through Solution Templates in the Azure Marketplace
- C. through Iron Skillets in the GitHub Repository
- D. through ARM Templates in the GitHub Repository
Answer: B,D
NEW QUESTION 38
......
PSE-PrismaCloud Dumps PDF - Want To Pass PSE-PrismaCloud Fast: https://www.dumpsreview.com/PSE-PrismaCloud-exam-dumps-review.html
100% Guaranteed Results PSE-PrismaCloud Unlimited 62 Questions: https://drive.google.com/open?id=1EiCppd1jMTZ14uadAbq6um4IniHx_aDo
