[Q29-Q51] Download Palo Alto Networks PSE-PrismaCloud Sample Questions [Oct-2023]

Download Palo Alto Networks PSE-PrismaCloud Sample Questions [Oct-2023]

Real PSE-PrismaCloud Exam Questions and Answers FREE

To prepare for the PSE-PrismaCloud Certification Exam, candidates can attend training courses offered by Palo Alto Networks or study the exam objectives and recommended resources. PSE-PrismaCloud exam objectives cover a wide range of topics, including cloud security concepts, Prisma Cloud deployment and management, cloud compliance and governance, and threat detection and response. Candidates can also benefit from hands-on experience with Prisma Cloud by practicing in a lab environment or working on real-world projects.

NEW QUESTION # 29
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

A. Source Check is enabled and Destination Check is disabled
B. Both Source and Destination Checks are enabled
C. Both Source and Destination Checks are disabled
D. Source Check is disabled and Destination Check is enabled

Answer: C

Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us

NEW QUESTION # 30
Which RQL string returns a list of all Azure virtual machines that are not currently running?

A. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
B. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
D. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'

Answer: B

NEW QUESTION # 31
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

A. External Dynamic List
B. VM Monitoring
C. CFT Template
D. XML API

Answer: B,D

Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/

NEW QUESTION # 32
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?

A. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
B. network where dest.resource IN (resource where role = 'Database'}
C. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
D. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Answer: C

NEW QUESTION # 33
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

A. 0
B. 1
C. 2
D. 3

Answer: D

NEW QUESTION # 34
What is required for an EC2 instance to access the internet directly from an AWS VPC?

A. Customer Gateway
B. Virtual Private Gateway
C. Internet Gateway
D. Transit Gateway

Answer: D

NEW QUESTION # 35
Which RQL string returns a list of all Azure virtual machines that are not currently running?

A. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
B. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
D. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'

Answer: B

NEW QUESTION # 36
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

A. new Auth Code
B. API Key
C. CPU ID
D. UUID

Answer: C,D

Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th

NEW QUESTION # 37
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

A. Clone the predefined Strict Profile, with packet capture settings enabled
B. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
C. Clone the predefined Strict Profile, with packet capture settings disabled
D. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

Answer: B

NEW QUESTION # 38
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

A. new Auth Code
B. CPU ID
C. API Key
D. UUID

Answer: A,C

NEW QUESTION # 39
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

A. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
B. Support for the templates is available through Professional Services from Palo Alto Networks.
C. Palo Alto Networks provides full support if a valid support license is in place.
D. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

Answer: D

NEW QUESTION # 40
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

A. CPU ID
B. UUID
C. License Key
D. Serial Number
E. Auth Code

Answer: A,D,E

NEW QUESTION # 41
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

A. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
B. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
C. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

Answer: B

NEW QUESTION # 42
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

A. QoS Profile to limit incoming requests
B. DoS Protection Profile with specific session counts
C. Zone Protection Profile
D. Custom threat signature

Answer: C

NEW QUESTION # 43
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

A. GDPR
B. HIPAA
C. Payment Card Industry DSS V3
D. CIS Benchmark

Answer: A

NEW QUESTION # 44
Which cloud provider supports iLB-as-next-hop?

A. Alibaba Cloud
B. Microsoft Azure
C. Oracle Cloud
D. Amazon Web Services

Answer: B

NEW QUESTION # 45
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

A. purchase a new PAYG license from a reseller
B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
C. launch a new VM using the PAYG image
D. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

Answer: C

NEW QUESTION # 46
Match the logging service with its cloud provider.

Answer:

Explanation:

Explanation
AWS, Azure, GCP, Azure, AWS, GCP

NEW QUESTION # 47
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

Answer:

Explanation:

NEW QUESTION # 48
What is a permanent public IP called on Amazon Web Services?

A. Floating IP
B. EIP
C. Reserved IP
D. PIP

Answer: B

NEW QUESTION # 49
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?