Get Ready with PSE-PrismaCloud Exam Dumps (2022) [Q33-Q56]

Get Ready with PSE-PrismaCloud Exam Dumps (2022)

Realistic PSE-PrismaCloud Dumps are Available for Instant Access

NEW QUESTION 33
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

• A. Prisma SaaS
• B. Traps
• C. Security Groups
• D. VM-Series firewalls
• E. Amazon Web Services WAF

Answer: A,C,D

 

NEW QUESTION 34
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

• A. IPsecVPN
• B. Fast Connect
• C. Direct Connect
• D. ExpressRoute

Answer: A,D

Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

 

NEW QUESTION 35
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

• A. notification templates
• B. RQL queries
• C. policies
• D. alert rules

Answer: C

 

NEW QUESTION 36
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

• A. NAT appliance
• B. Azure Stack Edge Router
• C. Public IP for the VM-Series NGFW
• D. Border Customer Network

Answer: A

 

NEW QUESTION 37
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

• A. Google Cloud Platform
• B. Microsoft Azure
• C. Amazon Web Services
• D. Oracle Cloud

Answer: A,B

 

NEW QUESTION 38
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

• A. launch a new VM using the PAYG image
• B. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
• C. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
• D. purchase a new PAYG license from a reseller

Answer: A

 

NEW QUESTION 39
How can you create a custom compliance standard in Prisma Public Cloud?

• A. Generate a new Compliance Report.
• B. From Compliance tab, clone a default framework and customize.
• C. From Compliance tab > Compliance Standards, click "Add New."
• D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

Answer: C

Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

 

NEW QUESTION 40
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

• A. Google Cloud Platform
• B. Oracle Cloud
• C. Amazon Web Services
• D. Microsoft Azure

Answer: A,B

 

NEW QUESTION 41
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

• A. launch a new VM using the PAYG image
• B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
• C. purchase a new PAYG license from a reseller
• D. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

Answer: D

 

NEW QUESTION 42
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

• A. fully instrumented API
• B. support for Dynamic Address Groups
• C. Aperture Orchestration Engine
• D. VM Orchestration Policy Editor

Answer: A,B

 

NEW QUESTION 43
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

• A. iLB-as-next-hop
• B. transit VPC and security VPC with VM-Series
• C. transit gateway and security VPC with VM-Series
• D. traditional active/standby HA on VM-Series

Answer: C,D

 

NEW QUESTION 44
What are three examples of outbound traffic flow? (Choose three.)

• A. web server inside Amazon Web Services receiving web requests from internet
• B. issue yum update command on an instance inside Amazon Web Services
• C. issue apt-get install command on an instance inside Amazon Web Services
• D. Microsoft Windows inside Azure requesting a security patch
• E. outgoing Prisma Public Cloud API calls

Answer: B,C,E

 

NEW QUESTION 45
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

• A. Serial Number
• B. UUID
• C. CPU ID
• D. Auth Code
• E. License Key

Answer: A,C,D

 

NEW QUESTION 46
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

• A. Suspicious file activity
• B. Denial-of-service activity
• C. Account hijacking attempts
• D. Unusual user activity
• E. Excessive login failures

Answer: C,D,E

Explanation:
Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli

 

NEW QUESTION 47
What is required for an EC2 instance to access the internet directly from an AWS VPC?

• A. Virtual Private Gateway
• B. Customer Gateway
• C. Transit Gateway
• D. Internet Gateway

Answer: C

 

NEW QUESTION 48
What is Prisma Public Cloud licensing based on?

• A. number of monitored workloads
• B. number of alerts generated
• C. volume of flow logs consumed
• D. number of accounts onboarded

Answer: A

 

NEW QUESTION 49
Which RQL string returns a list of all Azure virtual machines that are not currently running?

• A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
• B. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
• C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
• D. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"

Answer: D

 

NEW QUESTION 50
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

• A. Create an RQL config query to identify resources with the tag "Private."
• B. Open the Asset Dashboard, filter on tags: and choose "Private."
• C. Generate a CIS compliance report and review the "Asset Summary."
• D. Create an RQL network query to identify traffic from resources tagged "Private."

Answer: D

 

NEW QUESTION 51
Match the query type with its corresponding search

Answer:

Explanation:

 

NEW QUESTION 52
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

• A. GDPR
• B. Payment Card Industry DSS V3
• C. HIPAA
• D. CIS Benchmark

Answer: D

 

NEW QUESTION 53
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

Answer:

Explanation:

Explanation
backup, register, deploy, activate, load

 

NEW QUESTION 54
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

• A. Configure an Inventory report from the "Alerts" tab
• B. Generate a compliance report from the Compliance dashboard
• C. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
• D. Write an RQL query from the "Investigate" tab.

Answer: C,D

 

NEW QUESTION 55
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?

• A. Clone the predefined Strict Profile, with packet capture settings enabled
• B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
• C. Clone the predefined Strict Profile, with packet capture settings disabled
• D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

Answer: A

 

NEW QUESTION 56
......

Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:

Topic	Details
Topic 1	Help develop relationships with new Born-in-the-Cloud partners who will be integral in winning over new customers
Topic 2	Provide design consultation and standard methodology mentorship for rollout|Provide technical demos for strategic prospects and current accounts of Palo Alto Networks virtual offerings and integration in existing data center environments
Topic 3	Interact locally and remotely with customers in an equally persuasive, confident manner
Topic 4	Ability to discuss, with credibility, competitive offers in the marketplace and effectively differentiate against them
Topic 5	Assist with the training of new System Engineers in their designated region in installs customer presentations, and internally-focused deal preparation activities
Topic 6	Strategy planning for moving critical data, intellectual property Experience as a system engineer, solutions architect

 

Download Exam PSE-PrismaCloud Practice Test Questions with 100% Verified Answers: https://www.actual4labs.com/Palo-Alto-Networks/PSE-PrismaCloud-actual-exam-dumps.html

Share Latest PSE-PrismaCloudTest Practice Test Questions, Exam Dumps: https://drive.google.com/open?id=1BpjuYBg7L0pSropjzNKv9olxEg44dfwE