[Jul-2022] Dumps Practice Exam Questions Study Guide for the PSE-PrismaCloud Exam [Q25-Q44]

Rate this post

[Jul-2022] Dumps Practice Exam Questions Study Guide for the PSE-PrismaCloud Exam

PSE-PrismaCloud Dumps with Practice Exam Questions Answers

Q25. Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

Serial Number

CPU ID

Auth Code

License Key

UUID

Q26. When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?

Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings disabled

Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings enabled

Q27. How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

purchase a new PAYG license from a reseller

go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

launch a new VM using the PAYG image

Q28. When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings disabled

Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings enabled

Q29. A customer CSO has asked you to demonstrate how to identify all “Amazon RDS” resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

Generate a compliance report from the Compliance dashboard

Write an RQL query from the “Investigate” tab.

Configure an Inventory report from the “Alerts” tab

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

Q30. Match the query type with its corresponding search

Q31. An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

source address translation

destination address translation

port address translation

source and destination address translation

Q32. What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

through ARM Templates in the GitHub Repository

through Solution Templates in the Azure Marketplace

through Expedition in the Customer Success Portal

through Iron Skillets in the GitHub Repository

Q33. The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

The server VMs have private use only (RFC 1918) IPs. Amazon’s cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

Q34. A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

set system setting mgmt-interface-swap enable yes

set mgmt-interface settings swap yes

set mgmt-interface swap yes

set system setting mgmt-interface swap yes

Q35. Which Google Cloud Platform project shares its VPC networks with other projects?

Service project

Host project

Admin project

Subscribing project

Q36. Which cloud provider supports iLB-as-next-hop?

Microsoft Azure

Alibaba Cloud

Oracle Cloud

Amazon Web Services

Q37. How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as “Private?

Create an RQL config query to identify resources with the tag “Private.”

Create an RQL network query to identify traffic from resources tagged “Private.”

Open the Asset Dashboard, filter on tags: and choose “Private.”

Generate a CIS compliance report and review the “Asset Summary.”

Q38. An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

security group

tags

elastic ip address

source/destination checking

Q39. How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as “Private?

Create an RQL config query to identify resources with the tag “Private.”

Create an RQL network query to identify traffic from resources tagged “Private.”

Open the Asset Dashboard, filter on tags: and choose “Private.”

Generate a CIS compliance report and review the “Asset Summary.”

Q40. Which two statements are true about CloudFormation? (Choose two.)

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

Q41. Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Traps

Security Groups

Amazon Web Services WAF

Prisma SaaS

VM-Series firewalls

Q42. In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

fully instrumented API

Aperture Orchestration Engine

VM Orchestration Policy Editor

support for Dynamic Address Groups

Q43. Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

Google Cloud Platform

Microsoft Azure

Oracle Cloud

Amazon Web Services

Q44. Match the query type with its corresponding search