Free Sep-2022 PSE-PrismaCloud Certification Sample Questions certification Exam [Q31-Q54]

Free Sep-2022 PSE-PrismaCloud Certification Sample Questions certification Exam

Certification Topics of PSE-PrismaCloud Exam PDF Recently Updated Questions

Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:

Topic	Details
Topic 1	Provide design consultation and standard methodology mentorship for rollout|Provide technical demos for strategic prospects and current accounts of Palo Alto Networks virtual offerings and integration in existing data center environments
Topic 2	Effectively lead and support customer demonstrations with our System Engineers that showcase our value
Topic 3	Help develop relationships with new Born-in-the-Cloud partners who will be integral in winning over new customers
Topic 4	Interact locally and remotely with customers in an equally persuasive, confident manner
Topic 5	Ability to discuss, with credibility, competitive offers in the marketplace and effectively differentiate against them
Topic 6	Be the technical voice of Sales for all things related to security and compliance in Public Cloud
Topic 7	Act as the customers advocate for any issues that require technical assistance and follow up with the customer until the issue is resolved
Topic 8	Strategy planning for moving critical data, intellectual property Experience as a system engineer, solutions architect
Topic 9	Lead conversations about industry trends and emerging changes Support relationship expansion with top existing partners for Public Cloud

 

NEW QUESTION 31
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

• A. through Iron Skillets in the GitHub Repository
• B. through Solution Templates in the Azure Marketplace
• C. through Expedition in the Customer Success Portal
• D. through ARM Templates in the GitHub Repository

Answer: C,D

 

NEW QUESTION 32
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

• A. Generate a CIS compliance report and review the "Asset Summary."
• B. Create an RQL network query to identify traffic from resources tagged "Private."
• C. Create an RQL config query to identify resources with the tag "Private."
• D. Open the Asset Dashboard, filter on tags: and choose "Private."

Answer: B

 

NEW QUESTION 33
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

• A. compliance where
• B. event where
• C. user where
• D. network where
• E. config where

Answer: B,D,E

 

NEW QUESTION 34
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

• A. Configure User-ID.
• B. Whitelist IP addresses.
• C. Define enterprise settings.
• D. Create alert rules.

Answer: C

Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli

 

NEW QUESTION 35
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

• A. License Key
• B. CPU ID
• C. UUID
• D. Auth Code
• E. Serial Number

Answer: B,C,E

 

NEW QUESTION 36
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?

• A. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
• B. Clone the predefined Strict Profile, with packet capture settings enabled
• C. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
• D. Clone the predefined Strict Profile, with packet capture settings disabled

Answer: B

 

NEW QUESTION 37
What is the scope of the Amazon Web Services IAM Service?

• A. zonal
• B. regional
• C. VPC
• D. global

Answer: D

 

NEW QUESTION 38
Which cloud provider supports iLB-as-next-hop?

• A. Oracle Cloud
• B. Microsoft Azure
• C. Alibaba Cloud
• D. Amazon Web Services

Answer: B

 

NEW QUESTION 39
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

• A. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
• B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
• C. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
• D. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Answer: B

 

NEW QUESTION 40
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

• A. destination address translation
• B. source and destination address translation
• C. port address translation
• D. source address translation

Answer: D

 

NEW QUESTION 41
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

• A. purchase a new PAYG license from a reseller
• B. launch a new VM using the PAYG image
• C. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
• D. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

Answer: B

 

NEW QUESTION 42
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

• A. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
• B. Support for the templates is available through Professional Services from Palo Alto Networks.
• C. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
• D. Palo Alto Networks provides full support if a valid support license is in place.

Answer: C

 

NEW QUESTION 43
Match the logging service with its cloud provider.

Answer:

Explanation:

Explanation
AWS, Azure, GCP, Azure, AWS, GCP

 

NEW QUESTION 44
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)

• A. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
• B. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
• C. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
• D. create a bootstrap file that includes the mgmt-interface-swap command

Answer: B,D

Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

 

NEW QUESTION 45
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

• A. AWS NLB
• B. AWS CDN
• C. AWS NAT Gateway
• D. AWS ALB

Answer: B,D

 

NEW QUESTION 46
Which cloud provider supports iLB-as-next-hop?

• A. Oracle Cloud
• B. Microsoft Azure
• C. Amazon Web Services
• D. Alibaba Cloud

Answer: C

 

NEW QUESTION 47
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

• A. alert rules
• B. notification templates
• C. RQL queries
• D. policies

Answer: D

 

NEW QUESTION 48
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

• A. Azure Application Insight
• B. Azure Security Center
• C. Bootstrapping
• D. Resource Group
• E. ARM Template

Answer: A,C,E

 

NEW QUESTION 49
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

• A. Prisma SaaS
• B. Security Groups
• C. Traps
• D. Amazon Web Services WAF
• E. VM-Series firewalls

Answer: A,B,E

 

NEW QUESTION 50
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

• A. AWS NAT Gateway
• B. AWS NLB
• C. AWS CDN
• D. AWS ALB

Answer: A,C

 

NEW QUESTION 51
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

• A. 0
• B. 1
• C. 2
• D. 3

Answer: D

 

NEW QUESTION 52
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

• A. SNS
• B. CodeDeploy
• C. Lambda
• D. SQS

Answer: C

 

NEW QUESTION 53
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

• A. VM-500
• B. VM-300
• C. VM-GCP
• D. VM-100

Answer: B

 

NEW QUESTION 54
......

2022 New Preparation Guide of Palo Alto Networks PSE-PrismaCloud Exam: https://actualtests.trainingquiz.com/PSE-PrismaCloud-training-materials.html