[Sep-2021] PSE-PrismaCloud Dumps Full Questions - PSE-Prisma Cloud Professional Exam Study Guide
Exam Questions and Answers for PSE-PrismaCloud Study Guide
NEW QUESTION 35
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- B. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- C. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- D. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
Answer: C
NEW QUESTION 36
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Amazon Web Services WAF
- B. Inspector
- C. GuardDuty
- D. Shield
Answer: B
NEW QUESTION 37
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- B. CloudFormation is a declarative orchestration tool.
- C. CloudFormation is a procedural configuration management tool.
- D. CloudFormation templates can be written in JSON or YAML
Answer: A,D
NEW QUESTION 38
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. transit VPC and security VPC with VM-Series
- B. iLB-as-next-hop
- C. transit gateway and security VPC with VM-Series
- D. traditional active/standby HA on VM-Series
Answer: C,D
NEW QUESTION 39
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Solution Templates in the Azure Marketplace
- B. through Iron Skillets in the GitHub Repository
- C. through ARM Templates in the GitHub Repository
- D. through Expedition in the Customer Success Portal
Answer: A,C
NEW QUESTION 40
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. notification templates
- B. alert rules
- C. RQL queries
- D. policies
Answer: D
NEW QUESTION 41
Which cloud provider supports iLB-as-next-hop?
- A. Oracle Cloud
- B. Alibaba Cloud
- C. Amazon Web Services
- D. Microsoft Azure
Answer: D
NEW QUESTION 42
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION 43
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A. Create an RQL network query to identify traffic from resources tagged "Private."
- B. Generate a CIS compliance report and review the "Asset Summary."
- C. Create an RQL config query to identify resources with the tag "Private."
- D. Open the Asset Dashboard, filter on tags: and choose "Private."
Answer: D
NEW QUESTION 44
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. ISO 27001
- B. EU Data Protection Directive 95/46/EC
- C. GDPR
- D. Payment Card Industry 3.0
Answer: C
NEW QUESTION 45
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. QoS Profile to limit incoming requests
- B. DoS Protection Profile with specific session counts
- C. Zone Protection Profile
- D. Custom threat signature
Answer: C
NEW QUESTION 46
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
Answer: D
NEW QUESTION 47
What is Prisma Public Cloud licensing based on?
- A. number of accounts onboarded
- B. volume of flow logs consumed
- C. number of monitored workloads
- D. number of alerts generated
Answer: C
NEW QUESTION 48
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
Answer: B
NEW QUESTION 49
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- B. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- C. create a bootstrap file that includes the mgmt-interface-swap command
- D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 50
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)
- A. CFT Template
- B. XML API
- C. VM Monitoring
- D. External Dynamic List
Answer: B,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/
NEW QUESTION 51
......
PSE Palo Alto Networks System Engineer Professional - Prisma Cloud Free Update With 100% Exam Passing Guarantee: https://www.verifieddumps.com/PSE-PrismaCloud-valid-exam-braindumps.html
Real Exam Questions & Answers - Palo Alto Networks PSE-PrismaCloud Dump is Ready: https://drive.google.com/open?id=1HFs-uR0KjtThcsfp0o077gSDguuZMOSr
