Use the best ways of preparing for PSE-PrismaCloud Exam Dumps with ExamsLabs Palo Alto Networks PSE-PrismaCloud dump PDF [2023]
Palo Alto Networks PSE-PrismaCloud exam candidates will surely pass the Exam if they consider the PSE-PrismaCloud dumps learning material presented by ExamsLabs.
NEW QUESTION # 10
Which Prisma Public Cloud policy alerts administrators to unusual user activity?
- A. Configuration
- B. Network
- C. Anomaly
- D. Audit Event
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION # 11
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. fully instrumented API
- B. support for Dynamic Address Groups
- C. VM Orchestration Policy Editor
- D. Aperture Orchestration Engine
Answer: A,B
NEW QUESTION # 12
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation is a declarative orchestration tool.
- B. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- C. CloudFormation is a procedural configuration management tool.
- D. CloudFormation templates can be written in JSON or YAML
Answer: A,D
NEW QUESTION # 13
Which Google Cloud Platform project shares its VPC networks with other projects?
- A. Host project
- B. Admin project
- C. Service project
- D. Subscribing project
Answer: A
Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 14
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
NEW QUESTION # 15
How can you create a custom compliance standard in Prisma Public Cloud?
- A. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
- B. From Compliance tab > Compliance Standards, click "Add New."
- C. From Compliance tab, clone a default framework and customize.
- D. Generate a new Compliance Report.
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION # 16
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. source and destination address translation
- B. source address translation
- C. destination address translation
- D. port address translation
Answer: B
NEW QUESTION # 17
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- A. AWS CDN
- B. AWS NLB
- C. AWS ALB
- D. AWS NAT Gateway
Answer: A,D
NEW QUESTION # 18
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. CPU ID
- B. new Auth Code
- C. UUID
- D. API Key
Answer: B,D
Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th
NEW QUESTION # 19
Match the query type with its corresponding search
Answer:
Explanation:
NEW QUESTION # 20
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Clone the predefined Strict Profile, with packet capture settings disabled
- B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings enabled
- D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
Answer: D
NEW QUESTION # 21
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- B. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- C. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
- D. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
Answer: D
NEW QUESTION # 22
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. License Key
- B. Auth Code
- C. Serial Number
- D. CPU ID
- E. UUID
Answer: B,C,D
NEW QUESTION # 23
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)
- A. Microsoft Azure
- B. Amazon Web Services
- C. Google Cloud Platform
- D. Oracle Cloud
Answer: A,C
NEW QUESTION # 24
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 25
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Prisma SaaS
- B. Traps
- C. Amazon Web Services WAF
- D. VM-Series firewalls
- E. Security Groups
Answer: A,D,E
NEW QUESTION # 26
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. DoS Protection Profile with specific session counts
- B. QoS Profile to limit incoming requests
- C. Custom threat signature
- D. Zone Protection Profile
Answer: A
NEW QUESTION # 27
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Support for the templates is available through Professional Services from Palo Alto Networks.
- B. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- C. Palo Alto Networks provides full support if a valid support license is in place.
- D. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
Answer: D
NEW QUESTION # 28
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- B. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- C. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
- D. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
Answer: A
NEW QUESTION # 29
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?
- A. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))
- B. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
- C. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
- D. network where dest.resource IN (resource where role = 'Database'}
Answer: C
NEW QUESTION # 30
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-300
- B. VM-500
- C. VM-GCP
- D. VM-100
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 31
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Resource Group
- B. Azure Application Insight
- C. Azure Security Center
- D. Bootstrapping
- E. ARM Template
Answer: B,C,D
NEW QUESTION # 32
......
Full PSE-PrismaCloud Practice Test and 62 unique questions with explanations waiting just for you, get it now: https://drive.google.com/open?id=1XFT0FJHa4zEXBQ7sGFriORHFIW7DHO0t
Accurate & Verified Answers As Seen in the Real Exam here: https://www.examslabs.com/Palo-Alto-Networks/PSE-Prisma-Cloud-Professional/best-PSE-PrismaCloud-exam-dumps.html