2022 Latest 100% Exam Passing Ratio - PSE-PrismaCloud Dumps PDF
Pass Exam With Full Sureness - PSE-PrismaCloud Dumps with 62 Questions
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
NEW QUESTION 11
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. elastic ip address
- B. security group
- C. tags
- D. source/destination checking
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION 12
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
- B. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- C. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
Answer: C
NEW QUESTION 13
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. policies
- B. notification templates
- C. alert rules
- D. RQL queries
Answer: A
NEW QUESTION 14
What are three examples of outbound traffic flow? (Choose three.)
- A. issue apt-get install command on an instance inside Amazon Web Services
- B. Microsoft Windows inside Azure requesting a security patch
- C. issue yum update command on an instance inside Amazon Web Services
- D. outgoing Prisma Public Cloud API calls
- E. web server inside Amazon Web Services receiving web requests from internet
Answer: A,C,D
NEW QUESTION 15
Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?
- A. Create alert rules.
- B. Define enterprise settings.
- C. Configure User-ID.
- D. Whitelist IP addresses.
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 16
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?
- A. set mgmt-interface swap yes
- B. set system setting mgmt-interface swap yes
- C. set system setting mgmt-interface-swap enable yes
- D. set mgmt-interface settings swap yes
Answer: C
NEW QUESTION 17
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. transit VPC and security VPC with VM-Series
- B. traditional active/standby HA on VM-Series
- C. transit gateway and security VPC with VM-Series
- D. iLB-as-next-hop
Answer: B,C
NEW QUESTION 18
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. GDPR
- B. HIPAA
- C. Payment Card Industry DSS V3
- D. CIS Benchmark
Answer: A
NEW QUESTION 19
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. GDPR
- B. ISO 27001
- C. EU Data Protection Directive 95/46/EC
- D. Payment Card Industry 3.0
Answer: C
NEW QUESTION 20
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?
- A. 10.0.1.254
- B. 10.0.2.1
- C. 10.0.3.1
- D. 10.0.3.255
Answer: C
NEW QUESTION 21
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. purchase a new PAYG license from a reseller
- B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- C. launch a new VM using the PAYG image
- D. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
Answer: D
NEW QUESTION 22
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 23
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
NEW QUESTION 24
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?
- A. Clone the predefined Strict Profile, with packet capture settings enabled
- B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
Answer: A
NEW QUESTION 25
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. port address translation
- B. source and destination address translation
- C. source address translation
- D. destination address translation
Answer: C
NEW QUESTION 26
......
Verified PSE-PrismaCloud dumps Q&As - 100% Pass from BraindumpsIT: https://www.braindumpsit.com/PSE-PrismaCloud_real-exam.html
Pass PSE-PrismaCloud Exam in First Attempt Guaranteed 2022 Dumps: https://drive.google.com/open?id=1TV-ks-U7KS14yNNqdFvBE3-oQr2GyMLL