[Aug 30, 2023] Get Up-To-Date Real Exam Questions for PSE-PrismaCloud with New Materials [Q12-Q30]

Rate this post

[Aug 30, 2023] Get Up-To-Date Real Exam Questions for PSE-PrismaCloud with New Materials

Updated PSE-PrismaCloud Certification Exam Sample Questions

QUESTION 12
How is license utilization displayed within the Prisma Public Cloud interface?

navigate to the CLI and run show license command

navigate to General > Licensing

navigate to Dashboard > Asset Inventory

navigate to Settings (via the gear icon) > Licensing

QUESTION 13
A customer CSO has asked you to demonstrate how to identify all “Amazon RDS” resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

Generate a compliance report from the Compliance dashboard

Write an RQL query from the “Investigate” tab.

Configure an Inventory report from the “Alerts” tab

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

QUESTION 14
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

QUESTION 15
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

Azure Application Insight

Resource Group

Azure Security Center

Bootstrapping

ARM Template

QUESTION 16
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

source address translation

destination address translation

port address translation

source and destination address translation

QUESTION 17
can you create a custom compliance standard in Prisma Public Cloud?

Generate a new Compliance Report.

Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

From Compliance tab, clone a default framework and customize.

From Compliance tab > Compliance Standards, click “Add New.”

Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

QUESTION 18
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

platform as a service

infrastructure as a service

software as code

infrastructure as code

QUESTION 19
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?

Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings disabled

Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

Clone the predefined Strict Profile, with packet capture settings enabled

QUESTION 20
Match the logging service with its cloud provider.

Explanation
AWS, Azure, GCP, Azure, AWS, GCP

QUESTION 21
Which RQL string searches for all EBS volumes that do not have a “DataClassification” tag?

config where api.name = ‘aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*]key != DataClassification

config where api.name = ,aws-ec2-describe-volumes’ AND json.rule = tags[*].key exists

config where api.name = ‘aws-ec2-describe-volumes’ AND json.rule = tags[*].key = 1

QUESTION 22
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

iLB-as-next-hop

transit gateway and security VPC with VM-Series

traditional active/standby HA on VM-Series

transit VPC and security VPC with VM-Series

QUESTION 23
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

RQL queries

alert rules

notification templates

policies

QUESTION 24
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

fully instrumented API

Aperture Orchestration Engine

VM Orchestration Policy Editor

support for Dynamic Address Groups

QUESTION 25
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

Excessive login failures

Unusual user activity

Denial-of-service activity

Account hijacking attempts

Suspicious file activity

Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user’s activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli

QUESTION 26
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

VM Monitoring

External Dynamic List

CFT Template

XML API

Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/

QUESTION 27
What is required for an EC2 instance to access the internet directly from an AWS VPC?

Internet Gateway

Transit Gateway

Virtual Private Gateway

Customer Gateway

QUESTION 28
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

compliance where

network where

user where

config where

event where

QUESTION 29
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

Google Cloud Platform

Microsoft Azure

Oracle Cloud

Amazon Web Services

QUESTION 30
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

purchase a new PAYG license from a reseller

go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

launch a new VM using the PAYG image

Loading …

The PSE-PrismaCloud Exam is a challenging exam that requires candidates to have a deep understanding of cloud security concepts and the ability to apply this knowledge to complex scenarios. Candidates who pass the exam are recognized as experts in cloud security and are highly valued by organizations that use PrismaCloud to secure their cloud environments. PSE Palo Alto Networks System Engineer Professional – Prisma Cloud certification can help professionals advance their career and increase their earning potential.

PSE-PrismaCloud Study Guide Cover to Cover as Literally: https://www.examboosts.com/Palo-Alto-Networks/PSE-PrismaCloud-practice-exam-dumps.html