Best Quality PSE-PrismaCloud Exam Questions Palo Alto Networks Test To Gain Brilliante Result!
Preparations of PSE-PrismaCloud Exam 2021 PSE-Prisma Cloud Professional Unlimited 62 Questions
NEW QUESTION 18
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
Explanation
backup, register, deploy, activate, load
NEW QUESTION 19
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- B. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC
- D. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- E. Group14 / SHA-256 / AES-256-GCM / IKE-V1
Answer: B,C,E
NEW QUESTION 20
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- C. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
- D. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
Answer: C
NEW QUESTION 21
Match the query type with its corresponding search
Answer:
Explanation:
NEW QUESTION 22
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
- A. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- B. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- C. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
- D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000
NEW QUESTION 23
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Security Groups
- B. VM-Series firewalls
- C. Traps
- D. Amazon Web Services WAF
- E. Prisma SaaS
Answer: A,B,E
NEW QUESTION 24
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. ExpressRoute
- B. IPsecVPN
- C. Fast Connect
- D. Direct Connect
Answer: A,B
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
NEW QUESTION 25
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- A. Denial-of-service activity
- B. Unusual user activity
- C. Excessive login failures
- D. Suspicious file activity
- E. Account hijacking attempts
Answer: B,C,E
Explanation:
Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 26
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 27
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Customer Gateway
- B. Internet Gateway
- C. Virtual Private Gateway
- D. Transit Gateway
Answer: B
NEW QUESTION 28
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
- B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Clone the predefined Strict Profile, with packet capture settings enabled
Answer: A
NEW QUESTION 29
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. notification templates
- B. alert rules
- C. RQL queries
- D. policies
Answer: D
NEW QUESTION 30
can you create a custom compliance standard in Prisma Public Cloud?
- A. Generate a new Compliance Report.
- B. From Compliance tab > Compliance Standards, click "Add New."
- C. From Compliance tab, clone a default framework and customize.
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 31
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Solution Templates in the Azure Marketplace
- B. through Iron Skillets in the GitHub Repository
- C. through ARM Templates in the GitHub Repository
- D. through Expedition in the Customer Success Portal
Answer: A,C
NEW QUESTION 32
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. CIS Benchmark
- B. Payment Card Industry DSS V3
- C. HIPAA
- D. GDPR
Answer: A
NEW QUESTION 33
What are three examples of outbound traffic flow? (Choose three.)
- A. Microsoft Windows inside Azure requesting a security patch
- B. issue apt-get install command on an instance inside Amazon Web Services
- C. outgoing Prisma Public Cloud API calls
- D. web server inside Amazon Web Services receiving web requests from internet
- E. issue yum update command on an instance inside Amazon Web Services
Answer: A,B,C
NEW QUESTION 34
Match the logging service with its cloud provider.
Answer:
Explanation:
NEW QUESTION 35
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation is a procedural configuration management tool.
- B. CloudFormation templates can be written in JSON or YAML
- C. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- D. CloudFormation is a declarative orchestration tool.
Answer: B,D
NEW QUESTION 36
......
Focus on PSE-PrismaCloud All-in-One Exam Guide For Quick Preparation: https://www.real4dumps.com/PSE-PrismaCloud_examcollection.html
PSE-PrismaCloud All-in-One Exam Guide For Quick Preparation: https://drive.google.com/open?id=1ajDsYGcIBe3GWJWXY7wq_kFQmB47R6nc
