Latest PSE-PrismaCloud Exam Dumps Palo Alto Networks Exam from Training Expert Prep4away
Pass Palo Alto Networks PSE Palo Alto Networks System Engineer Professional - Prisma Cloud PDF Dumps | Recently Updated 62 Questions
NEW QUESTION 36
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- B. CloudFormation is a declarative orchestration tool.
- C. CloudFormation is a procedural configuration management tool.
- D. CloudFormation templates can be written in JSON or YAML
Answer: B,D
NEW QUESTION 37
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- A. Aperture Orchestration Engine
- B. VM Orchestration Policy Editor
- C. fully instrumented API
- D. support for Dynamic Address Groups
Answer: A,D
NEW QUESTION 38
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?
- A. set system setting mgmt-interface swap yes
- B. set system setting mgmt-interface-swap enable yes
- C. set mgmt-interface swap yes
- D. set mgmt-interface settings swap yes
Answer: B
NEW QUESTION 39
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- B. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC
- D. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- E. Group14 / SHA-256 / AES-256-CBC / IKE-V1
Answer: A,C,D
NEW QUESTION 40
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Iron Skillets in the GitHub Repository
- B. through Solution Templates in the Azure Marketplace
- C. through ARM Templates in the GitHub Repository
- D. through Expedition in the Customer Success Portal
Answer: C,D
NEW QUESTION 41
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- A. AWS CDN
- B. AWS NLB
- C. AWS ALB
- D. AWS NAT Gateway
Answer: A,D
NEW QUESTION 42
What are two examples of Amazon Web Services logging services? (Choose two.)
- A. CloudEvent
- B. CloudLog
- C. CloudWatch
- D. CIoudTrail
Answer: C,D
NEW QUESTION 43
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. ARM Template
- B. Resource Group
- C. Azure Application Insight
- D. Bootstrapping
- E. Azure Security Center
Answer: A,C,D
NEW QUESTION 44
How can you create a custom compliance standard in Prisma Public Cloud?
- A. Generate a new Compliance Report.
- B. From Compliance tab, clone a default framework and customize.
- C. From Compliance tab > Compliance Standards, click "Add New."
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 45
What is the scope of the Amazon Web Services 1AM Service?
- A. regional
- B. zonal
- C. global
- D. VPC
Answer: C
NEW QUESTION 46
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
NEW QUESTION 47
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
- A. elastic ip address
- B. security group
- C. tags
- D. source/destination checking
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de
NEW QUESTION 48
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?
- A. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.
- B. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
- C. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
- D. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
Answer: B
NEW QUESTION 49
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Amazon Web Services WAF
- B. Prisma SaaS
- C. Security Groups
- D. VM-Series firewalls
- E. Traps
Answer: A,D,E
NEW QUESTION 50
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?
- A. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))
- B. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
- C. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
- D. network where dest.resource IN (resource where role = 'Database'}
Answer: C
NEW QUESTION 51
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Azure Stack Edge Router
- B. Border Customer Network
- C. NAT appliance
- D. Public IP for the VM-Series NGFW
Answer: C
NEW QUESTION 52
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Customer Gateway
- B. Virtual Private Gateway
- C. Transit Gateway
- D. Internet Gateway
Answer: D
NEW QUESTION 53
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Prisma SaaS
- B. Security Groups
- C. Traps
- D. VM-Series firewalls
- E. Amazon Web Services WAF
Answer: A,B,D
NEW QUESTION 54
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- A. AWS NAT Gateway
- B. AWS CDN
- C. AWS ALB
- D. AWS NLB
Answer: B,C
NEW QUESTION 55
can you create a custom compliance standard in Prisma Public Cloud?
- A. Generate a new Compliance Report.
- B. From Compliance tab, clone a default framework and customize.
- C. From Compliance tab > Compliance Standards, click "Add New."
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 56
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. Fast Connect
- B. ExpressRoute
- C. IPsecVPN
- D. Direct Connect
Answer: B,C
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
NEW QUESTION 57
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)
- A. External Dynamic List
- B. CFT Template
- C. XML API
- D. VM Monitoring
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/
NEW QUESTION 58
......
Updated Test Engine to Practice PSE-PrismaCloud Dumps & Practice Exam: https://testking.vcetorrent.com/PSE-PrismaCloud-valid-vce-torrent.html