[Q13-Q28] Oct-2023 Realistic PSE-PrismaCloud Accurate & Verified Answers As Experienced in the Actual Test!

Rate this post

Oct-2023 Realistic PSE-PrismaCloud Accurate & Verified Answers As Experienced in the Actual Test!

Latest Palo Alto Networks PSE-PrismaCloud Practice Test Questions, PSE Palo Alto Networks System Engineer Professional – Prisma Cloud Exam Dumps

NEW QUESTION 13
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

security group

tags

elastic ip address

source/destination checking

Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de

NEW QUESTION 14
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

Custom threat signature

Zone Protection Profile

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

NEW QUESTION 15
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

VM-300

VM-GCP

VM-100

VM-500

NEW QUESTION 16
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

iLB-as-next-hop

transit gateway and security VPC with VM-Series

traditional active/standby HA on VM-Series

transit VPC and security VPC with VM-Series

NEW QUESTION 17
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

purchase a new PAYG license from a reseller

go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

launch a new VM using the PAYG image

NEW QUESTION 18
Which two statements are true about CloudFormation? (Choose two.)

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

NEW QUESTION 19
What are three examples of outbound traffic flow? (Choose three.)

issue yum update command on an instance inside Amazon Web Services

Microsoft Windows inside Azure requesting a security patch

web server inside Amazon Web Services receiving web requests from internet

issue apt-get install command on an instance inside Amazon Web Services

outgoing Prisma Public Cloud API calls

NEW QUESTION 20
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

Excessive login failures

Unusual user activity

Denial-of-service activity

Account hijacking attempts

Suspicious file activity

Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user’s activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli

NEW QUESTION 21
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

Public IP for the VM-Series NGFW

NAT appliance

Azure Stack Edge Router

Border Customer Network

NEW QUESTION 22
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as “Private?

Create an RQL config query to identify resources with the tag “Private.”

Create an RQL network query to identify traffic from resources tagged “Private.”

Open the Asset Dashboard, filter on tags: and choose “Private.”

Generate a CIS compliance report and review the “Asset Summary.”

NEW QUESTION 23
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

source address translation

destination address translation

port address translation

source and destination address translation

NEW QUESTION 24
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

The server VMs have private use only (RFC 1918) IPs. Amazon’s cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

NEW QUESTION 25
What is a permanent public IP called on Amazon Web Services?

Reserved IP

PIP

EIP

Floating IP

NEW QUESTION 26
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

NEW QUESTION 27
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Both Source and Destination Checks are disabled

Both Source and Destination Checks are enabled

Source Check is disabled and Destination Check is enabled

Source Check is enabled and Destination Check is disabled

Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us

NEW QUESTION 28
What is required for an EC2 instance to access the internet directly from an AWS VPC?

Internet Gateway

Transit Gateway

Virtual Private Gateway

Customer Gateway

Loading …

Free PSE-PrismaCloud Exam Files Downloaded Instantly 100% Dumps & Practice Exam: https://www.testsimulate.com/PSE-PrismaCloud-study-materials.html

Leave a Reply Cancel reply