[Q10-Q29] Latest PSE-PrismaCloud Exam with Accurate PSE Palo Alto Networks System Engineer Professional - Prisma Cloud PDF Questions [Dec 13, 2021]

[Dec 13, 2021] Latest PSE-PrismaCloud Exam with Accurate PSE Palo Alto Networks System Engineer Professional - Prisma Cloud PDF Questions

Practice To PSE-PrismaCloud - itPass4sure Remarkable Practice On your PSE Palo Alto Networks System Engineer Professional - Prisma Cloud Exam

NEW QUESTION 10
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

• A. Amazon Web Services WAF
• B. VM-Series firewalls
• C. Traps
• D. Prisma SaaS
• E. Security Groups

Answer: B,D,E

 

NEW QUESTION 11
Match the query type with its corresponding search

Answer:

Explanation:

Explanation
network where,
event where,
config where

 

NEW QUESTION 12
Which change represents a VM-Series NGFW license transfer?

• A. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
• B. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
• C. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
• D. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

Answer: D

 

NEW QUESTION 13
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

• A. VM-GCP
• B. VM-300
• C. VM-500
• D. VM-100

Answer: B

Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

 

NEW QUESTION 14
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

• A. Oracle Cloud
• B. Microsoft Azure
• C. Amazon Web Services
• D. Google Cloud Platform

Answer: B,D

 

NEW QUESTION 15
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

• A. Amazon Web Services WAF
• B. GuardDuty
• C. Inspector
• D. Shield

Answer: C

 

NEW QUESTION 16
can you create a custom compliance standard in Prisma Public Cloud?

• A. From Compliance tab > Compliance Standards, click "Add New."
• B. Generate a new Compliance Report.
• C. From Compliance tab, clone a default framework and customize.
• D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

Answer: A

Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

 

NEW QUESTION 17
What is a permanent public IP called on Amazon Web Services?

• A. EIP
• B. Reserved IP
• C. PIP
• D. Floating IP

Answer: A

 

NEW QUESTION 18
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

• A. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
• B. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
• C. Clone the predefined Strict Profile, with packet capture settings disabled
• D. Clone the predefined Strict Profile, with packet capture settings enabled

Answer: B

 

NEW QUESTION 19
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

• A. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
• B. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
• C. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
• D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

Answer: C

 

NEW QUESTION 20
Which Google Cloud Platform project shares its VPC networks with other projects?

• A. Service project
• B. Host project
• C. Subscribing project
• D. Admin project

Answer: B

Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

 

NEW QUESTION 21
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

• A. AWS NLB
• B. AWS NAT Gateway
• C. AWS ALB
• D. AWS CDN

Answer: B,D

 

NEW QUESTION 22
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

• A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
• B. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
• C. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
• D. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

Answer: D

 

NEW QUESTION 23
How can you create a custom compliance standard in Prisma Public Cloud?

• A. From Compliance tab > Compliance Standards, click "Add New."
• B. Generate a new Compliance Report.
• C. From Compliance tab, clone a default framework and customize.
• D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.

Answer: A

Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

 

NEW QUESTION 24
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

• A. 10.0.1.254
• B. 10.0.2.1
• C. 10.0.3.1
• D. 10.0.3.255

Answer: C

 

NEW QUESTION 25
Which cloud provider supports iLB-as-next-hop?

• A. Oracle Cloud
• B. Microsoft Azure
• C. Amazon Web Services
• D. Alibaba Cloud

Answer: B

 

NEW QUESTION 26
What is the scope of the Amazon Web Services 1AM Service?

• A. global
• B. regional
• C. zonal
• D. VPC

Answer: A

 

NEW QUESTION 27
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

• A. QoS Profile to limit incoming requests
• B. DoS Protection Profile with specific session counts
• C. Zone Protection Profile
• D. Custom threat signature

Answer: C

 

NEW QUESTION 28
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW VulnerabilityProtection Profiles?

• A. Clone the predefined Strict Profile, with packet capture settings enabled
• B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
• C. Clone the predefined Strict Profile, with packet capture settings disabled
• D. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

Answer: A

 

NEW QUESTION 29
......

Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:

Topic	Details
Topic 1	Be the technical voice of Sales for all things related to security and compliance in Public Cloud
Topic 2	Lead conversations about industry trends and emerging changes Support relationship expansion with top existing partners for Public Cloud
Topic 3	Provide design consultation and standard methodology mentorship for rollout|Provide technical demos for strategic prospects and current accounts of Palo Alto Networks virtual offerings and integration in existing data center environments
Topic 4	Help develop relationships with new Born-in-the-Cloud partners who will be integral in winning over new customers
Topic 5	Act as the customers advocate for any issues that require technical assistance and follow up with the customer until the issue is resolved
Topic 6	Effectively lead and support customer demonstrations with our System Engineers that showcase our value
Topic 7	Interact locally and remotely with customers in an equally persuasive, confident manner
Topic 8	Assist with the training of new System Engineers in their designated region in installs customer presentations, and internally-focused deal preparation activities
Topic 9	Ability to discuss, with credibility, competitive offers in the marketplace and effectively differentiate against them
Topic 11	Strategy planning for moving critical data, intellectual property Experience as a system engineer, solutions architect

 

Exam Questions and Answers for  PSE-PrismaCloud Study Guide Questions and Answers!: https://www.itpass4sure.com/PSE-PrismaCloud-practice-exam.html

Practice To PSE-PrismaCloud - itPass4sure Remarkable Practice On your PSE Palo Alto Networks System Engineer Professional - Prisma Cloud Exam: https://drive.google.com/open?id=1CiKZT_OxraVxoE0GAwSEXnUk9EtxLsUW