Palo Alto Networks PSE-PrismaCloud Exam Questions (Updated 2023) 100% Real Question Answers [Q11-Q34]

4/5 - (1 vote)

Palo Alto Networks PSE-PrismaCloud Exam Questions (Updated 2023) 100% Real Question Answers

Pass Palo Alto Networks PSE-PrismaCloud Exam Quickly With BraindumpStudy

The PSE-PrismaCloud Exam is an essential certification for any IT professional seeking to advance their career in cloud security. By earning this certification, candidates can demonstrate their expertise in one of the most critical areas of IT security, and position themselves for new career opportunities and higher salaries.

NEW QUESTION 11
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?

network where source.publicnetwork IN (‘Suspicious IPs’) and dest.resource IN (resource where role IN (‘AWS RDS’, ‘Database’))

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest.resource IN (resource where role IN (‘LDAP’))

network where dest.resource IN (resource where role = ‘Database’}

network where source.publicnetwork IN (‘Suspicious IPs’, ‘Internet IPs’) and dest resource IN (resource where role IN (‘AWS RDS’. ‘Database’))

NEW QUESTION 12
What is a permanent public IP called on Amazon Web Services?

Reserved IP

PIP

EIP

Floating IP

NEW QUESTION 13
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

AWS CDN

AWS NAT Gateway

AWS ALB

AWS NLB

NEW QUESTION 14
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Explanation
longest, shortest, path, lowest multi, lowest peer

NEW QUESTION 15
What is required for an EC2 instance to access the internet directly from an AWS VPC?

Internet Gateway

Transit Gateway

Virtual Private Gateway

Customer Gateway

NEW QUESTION 16
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

NEW QUESTION 17
Which cloud provider supports iLB-as-next-hop?

Microsoft Azure

Alibaba Cloud

Oracle Cloud

Amazon Web Services

NEW QUESTION 18
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

Azure Application Insight

Resource Group

Azure Security Center

Bootstrapping

ARM Template

NEW QUESTION 19
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Both Source and Destination Checks are disabled

Both Source and Destination Checks are enabled

Source Check is disabled and Destination Check is enabled

Source Check is enabled and Destination Check is disabled

Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us

NEW QUESTION 20
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

NEW QUESTION 21
Which Google Cloud Platform project shares its VPC networks with other projects?

Service project

Host project

Admin project

Subscribing project

Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

NEW QUESTION 22
Match the query type with its corresponding search

NEW QUESTION 23
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

NEW QUESTION 24
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

The server VMs have private use only (RFC 1918) IPs. Amazon’s cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

NEW QUESTION 25
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as “Private?

Create an RQL config query to identify resources with the tag “Private.”

Create an RQL network query to identify traffic from resources tagged “Private.”

Open the Asset Dashboard, filter on tags: and choose “Private.”

Generate a CIS compliance report and review the “Asset Summary.”

NEW QUESTION 26
What is Prisma Public Cloud licensing based on?

number of alerts generated

number of accounts onboarded

number of monitored workloads

volume of flow logs consumed

NEW QUESTION 27
Match the query type with its corresponding search

Explanation
network where,
event where,
config where

NEW QUESTION 28
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

through ARM Templates in the GitHub Repository

through Solution Templates in the Azure Marketplace

through Expedition in the Customer Success Portal

through Iron Skillets in the GitHub Repository

NEW QUESTION 29
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

platform as a service

infrastructure as a service

software as code

infrastructure as code

NEW QUESTION 30
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

fully instrumented API

Aperture Orchestration Engine

VM Orchestration Policy Editor

support for Dynamic Address Groups

NEW QUESTION 31
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

network where publicnetwork = (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

network where dest.publicnetwork IN (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

show traffic where destination.network = (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

network where bytes > 1GB and destination = ‘Internet IPs’ OR ‘Suspicious IPs’

Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( ‘Internet IPs’, ‘Suspicious IPs’ ) AND bytes > 1000000000

NEW QUESTION 32
Which Prisma Public Cloud policy alerts administrators to unusual user activity?

Anomaly

Audit Event

Network

Configuration

Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli

NEW QUESTION 33
Which RQL string searches for all EBS volumes that do not have a “DataClassification” tag?

config where api.name = ‘aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*]key != DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*].key exists

config where api.name = ‘aws-ec2-describe-volumes’ AND json.rule = tags[*].key = 1

NEW QUESTION 34
Which cloud provider supports iLB-as-next-hop?

Microsoft Azure

Alibaba Cloud

Oracle Cloud

Amazon Web Services

Loading …

Real Palo Alto Networks PSE-PrismaCloud Exam Questions [Updated 2023]: https://www.braindumpstudy.com/PSE-PrismaCloud_braindumps.html

Tags: new PSE-PrismaCloud exam pass4sure, new PSE-PrismaCloud exam review, new PSE-PrismaCloud test answers, PSE-PrismaCloud authentic exam questions, PSE-PrismaCloud latest braindumps ebook, PSE-PrismaCloud latest exam cram sheet, PSE-PrismaCloud latest test notes, PSE-PrismaCloud test simulator

Exam Study Guide & Braindumps

Palo Alto Networks PSE-PrismaCloud Exam Questions (Updated 2023) 100% Real Question Answers [Q11-Q34]

Leave a Reply Cancel reply