Palo Alto Networks PSE-PrismaCloud Daily Practice Exam New 2021 Updated 62 Questions
Use Valid PSE-PrismaCloud Exam - Actual Exam Question & Answer
NEW QUESTION 33
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
NEW QUESTION 34
Which Google Cloud Platform project shares its VPC networks with other projects?
- A. Subscribing project
- B. Service project
- C. Host project
- D. Admin project
Answer: C
Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 35
What is a permanent public IP called on Amazon Web Services?
- A. EIP
- B. Floating IP
- C. PIP
- D. Reserved IP
Answer: A
NEW QUESTION 36
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)
- A. Google Cloud Platform
- B. Amazon Web Services
- C. Microsoft Azure
- D. Oracle Cloud
Answer: A,D
NEW QUESTION 37
How is license utilization displayed within the Prisma Public Cloud interface?
- A. navigate to Settings (via the gear icon) > Licensing
- B. navigate to Dashboard > Asset Inventory
- C. navigate to General > Licensing
- D. navigate to the CLI and run show license command
Answer: A
NEW QUESTION 38
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)
- A. Google Cloud Platform
- B. Amazon Web Services
- C. Oracle Cloud
- D. Microsoft Azure
Answer: A,D
NEW QUESTION 39
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. Custom threat signature
- B. QoS Profile to limit incoming requests
- C. Zone Protection Profile
- D. DoS Protection Profile with specific session counts
Answer: C
NEW QUESTION 40
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. ISO 27001
- B. GDPR
- C. EU Data Protection Directive 95/46/EC
- D. Payment Card Industry 3.0
Answer: B
NEW QUESTION 41
Which RQL string returns a list of all Azure virtual machines that are not currently running?
- A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"
- B. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"
- C. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"
- D. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'
Answer: C
NEW QUESTION 42
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- A. Excessive login failures
- B. Account hijacking attempts
- C. Unusual user activity
- D. Denial-of-service activity
- E. Suspicious file activity
Answer: A,B,C
Explanation:
Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli
NEW QUESTION 43
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudLog
- B. CloudWatch
- C. CIoudTrail
- D. CloudEvent
Answer: B,C
NEW QUESTION 44
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. Zone Protection Profile
- B. Custom threat signature
- C. QoS Profile to limit incoming requests
- D. DoS Protection Profile with specific session counts
Answer: D
NEW QUESTION 45
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- C. launch a new VM using the PAYG image
- D. purchase a new PAYG license from a reseller
Answer: A
NEW QUESTION 46
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Shield
- B. GuardDuty
- C. Inspector
- D. Amazon Web Services WAF
Answer: C
NEW QUESTION 47
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. VM Orchestration Policy Editor
- B. fully instrumented API
- C. Aperture Orchestration Engine
- D. support for Dynamic Address Groups
Answer: C,D
NEW QUESTION 48
......
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
Test Engine to Practice PSE-PrismaCloud Test Questions: https://www.exams-boost.com/PSE-PrismaCloud-valid-materials.html
PSE-PrismaCloud Real Exam Questions Test Engine Dumps Training With 62 Questions: https://drive.google.com/open?id=12ZYd3Lc4KQK1ie7dtjCRZeLHmS9veYlZ