PSE-PrismaCloud Sample Practice Exam Questions 2023 Updated Verified [Q15-Q36]

Rate this post

PSE-PrismaCloud Sample Practice Exam Questions 2023 Updated Verified

Exam Study Guide Free Practice Test LAST UPDATED PSE-PrismaCloud

The PSE-PrismaCloud (PSE Palo Alto Networks System Engineer Professional – Prisma Cloud) Certification Exam is designed for system engineers who are interested in mastering the concepts and technologies of cloud security. PSE Palo Alto Networks System Engineer Professional – Prisma Cloud certification exam is an excellent way for professionals to validate their expertise in the use of Prisma Cloud to secure cloud-native applications and infrastructure. PSE-PrismaCloud exam covers various topics, including cloud security posture management, cloud workload protection, and network security for cloud environments.

NEW QUESTION 15
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

Explanation
backup, register, deploy, activate, load

NEW QUESTION 16
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

Custom threat signature

Zone Protection Profile

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

NEW QUESTION 17
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

VM Monitoring

External Dynamic List

CFT Template

XML API

Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/

NEW QUESTION 18
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

The server VMs have private use only (RFC 1918) IPs. Amazon’s cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

NEW QUESTION 19
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

platform as a service

infrastructure as a service

software as code

infrastructure as code

NEW QUESTION 20
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

source address translation

destination address translation

port address translation

source and destination address translation

NEW QUESTION 21
Which RQL string returns a list of all Azure virtual machines that are not currently running?

config where api.name = ‘azure-vm-list’ AND json.rule = powerState = “off’

config where api.name = ‘azure-vm-list’ AND json.rule = powerState does not contain “running”

config where api.name = ‘azure-vm-list’ AND json.rule = powerState = “running”

config where api.name = ‘azure-vm-list’ AND json.rule = powerState contains “running”

NEW QUESTION 22
Which RQL string searches for all EBS volumes that do not have a “DataClassification” tag?

config where api.name = ‘aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*]key != DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*].key exists

config where api.name = ‘aws-ec2-describe-volumes’ AND json.rule = tags[*].key = 1

NEW QUESTION 23
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

source address translation

destination address translation

port address translation

source and destination address translation

NEW QUESTION 24
What are three examples of outbound traffic flow? (Choose three.)

issue yum update command on an instance inside Amazon Web Services

Microsoft Windows inside Azure requesting a security patch

web server inside Amazon Web Services receiving web requests from internet

issue apt-get install command on an instance inside Amazon Web Services

outgoing Prisma Public Cloud API calls

NEW QUESTION 25
Match the query type with its corresponding search

Explanation
network where,
event where,
config where

NEW QUESTION 26
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

NEW QUESTION 27
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Group2 / SHA-1 / AES-128-CBC / IKE-V1

Group2 / SHA-1 / AES-128-GCM / IKE-V1

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group2 / SHA-1 / AES-128-CBC

Group14 / SHA-256 / AES-256-CBC / IKE-V1

NEW QUESTION 28
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

Direct Connect

Fast Connect

IPsecVPN

ExpressRoute

Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

NEW QUESTION 29
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

fully instrumented API

Aperture Orchestration Engine

VM Orchestration Policy Editor

support for Dynamic Address Groups

NEW QUESTION 30
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

VM-300

VM-GCP

VM-100

VM-500

NEW QUESTION 31
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

Serial Number

CPU ID

Auth Code

License Key

UUID

NEW QUESTION 32
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

NEW QUESTION 33
Which two statements are true about CloudFormation? (Choose two.)

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

NEW QUESTION 34
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

GDPR

EU Data Protection Directive 95/46/EC

ISO 27001

Payment Card Industry 3.0

NEW QUESTION 35
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Traps

Prisma SaaS

Amazon Web Services WAF

VM-Series firewalls

Security Groups

NEW QUESTION 36
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

Custom threat signature

Zone Protection Profile

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

Loading …

The PSE-PrismaCloud certification exam covers a range of topics related to cloud security, including cloud security architecture, cloud security best practices, cloud security technologies, and cloud security deployment and management. Candidates are required to demonstrate their understanding of these topics through a combination of multiple-choice questions and practical scenarios. Passing the exam requires a deep understanding of cloud security concepts and the ability to apply them in real-world situations. Successful candidates will be able to design and implement secure cloud environments using Palo Alto Networks Prisma Cloud, and will be recognized as experts in the field of cloud security.

The New PSE-PrismaCloud 2023 Updated Verified Study Guides & Best Courses: https://www.examstorrent.com/PSE-PrismaCloud-exam-dumps-torrent.html

admin

You May Also Like

Leave a Reply Cancel reply