Unique Top-selling PSE-PrismaCloud Exams - New 2021 Palo Alto Networks Pratice Exam
PSE-Prisma Cloud Professional Dumps PSE-PrismaCloud Exam for Full Questions - Exam Study Guide
NEW QUESTION 19
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- B. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC
- D. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- E. Group14 / SHA-256 / AES-256-GCM / IKE-V1
Answer: B,C,E
NEW QUESTION 20
can you create a custom compliance standard in Prisma Public Cloud?
- A. Generate a new Compliance Report.
- B. From Compliance tab > Compliance Standards, click "Add New."
- C. From Compliance tab, clone a default framework and customize.
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 21
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 22
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. port address translation
- B. source and destination address translation
- C. source address translation
- D. destination address translation
Answer: A
NEW QUESTION 23
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation is a procedural configuration management tool.
- B. CloudFormation templates can be written in JSON or YAML
- C. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- D. CloudFormation is a declarative orchestration tool.
Answer: B,D
NEW QUESTION 24
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. ISO 27001
- B. EU Data Protection Directive 95/46/EC
- C. Payment Card Industry 3.0
- D. GDPR
Answer: B
NEW QUESTION 25
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudWatch
- B. CloudLog
- C. CIoudTrail
- D. CloudEvent
Answer: A,C
NEW QUESTION 26
What is a permanent public IP called on Amazon Web Services?
- A. EIP
- B. Floating IP
- C. Reserved IP
- D. PIP
Answer: A
NEW QUESTION 27
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?
- A. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- B. Clone the predefined Strict Profile, with packet capture settings enabled
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
Answer: B
NEW QUESTION 28
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Bootstrapping
- B. Azure Security Center
- C. Azure Application Insight
- D. ARM Template
- E. Resource Group
Answer: A,B,C
NEW QUESTION 29
How can you create a custom compliance standard in Prisma Public Cloud?
- A. Generate a new Compliance Report.
- B. From Compliance tab > Compliance Standards, click "Add New."
- C. From Compliance tab, clone a default framework and customize.
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 30
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- A. AWS CDN
- B. AWS NLB
- C. AWS NAT Gateway
- D. AWS ALB
Answer: A,C
NEW QUESTION 31
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
Answer: D
NEW QUESTION 32
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
Explanation
longest, shortest, path, lowest multi, lowest peer
NEW QUESTION 33
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. QoS Profile to limit incoming requests
- B. DoS Protection Profile with specific session counts
- C. Zone Protection Profile
- D. Custom threat signature
Answer: C
NEW QUESTION 34
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
- B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Clone the predefined Strict Profile, with packet capture settings enabled
Answer: A
NEW QUESTION 35
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION 36
......
Best way to practice test for Palo Alto Networks PSE-PrismaCloud: https://www.itexamreview.com/PSE-PrismaCloud-exam-dumps.html
PSE-PrismaCloud Dump Ready - Exam Questions and Answers: https://drive.google.com/open?id=1gQ9i9AxaCnKK1r2IaoGyWeyF9QKys6U_
