[Q62-Q81] Get 100% Real PSE-PrismaCloud Accurate & Verified Answers As Seen in the Real Exam!

5/5 - (1 vote)

Get 100% Real PSE-PrismaCloud Exam Questions, Accurate & Verified Answers As Seen in the Real Exam!

PSE-PrismaCloud Premium Files Updated Sep-2024 Practice Valid Exam Dumps Question

The PSE-PrismaCloud certification is essential for system engineers who work with Prisma Cloud customers. PSE Palo Alto Networks System Engineer Professional – Prisma Cloud certification will help individuals to gain a comprehensive understanding of the Prisma Cloud platform, become proficient in its deployment, management, and troubleshooting. Additionally, it will enable system engineers to stay up-to-date with the latest technologies and trends in cloud security.

Q62. What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)

run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

create a bootstrap file that includes the mgmt-interface-swap command

in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on- google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for- google-internal-load-balancing.html

Q63. Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

AWS CDN

AWS NAT Gateway

AWS ALB

AWS NLB

Q64. What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

VM-300

VM-GCP

VM-100

VM-500

Q65. Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Explanation
longest, shortest, path, lowest multi, lowest peer

Q66. What is a permanent public IP called on Amazon Web Services?

Reserved IP

PIP

EIP

Floating IP

Q67. Which type of Prisma Cloud Enterprise alert supports autoremediation?

network

audit

anomaly

config

Q68. Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)

DigitalOcean

Azure

IBM Cloud

Oracle Cloud

Q69. Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

iLB-as-next-hop

transit gateway and security VPC with VM-Series

traditional active/standby HA on VM-Series

transit VPC and security VPC with VM-Series

Q70. Where can rules be configured and viewed to configure trusted images?

Monitor > Compliance > Trusted Images

Monitor > Compliance > Images

Defend > Compliance > Trusted Images

Defend > Compliance > Images

Q71. A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

Q72. Which two cloud providers provide egress load balancing? (Choose two.)

Microsoft Azure

Alibaba Cloud

Amazon Web Services

Oracle Cloud

Q73. Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

network where publicnetwork = (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

network where dest.publicnetwork IN (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

show traffic where destination.network = (‘Internet IPs’, ‘Suspicious IPs’) AND bytes > 1000000000

network where bytes > 1GB and destination = ‘Internet IPs’ OR ‘Suspicious IPs’

Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( ‘Internet IPs’, ‘Suspicious IPs’ ) AND bytes > 1000000000

Q74. Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

Shield

Inspector

GuardDuty

Amazon Web Services WAF

Explanation
http://www.paloguard.com/datasheets/prisma-cloud-on-aws.pdf

Q75. Which two statements are true about CloudFormation? (Choose two.)

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

Q76. What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

VM-GCP

VM-100

VM-500

VM-300

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on- google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud.html

Q77. Which two types of Resource Query Language (RQL) queries can be used to create policies? (Choose two.)

hose from

network from

system from

event from

Q78. Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?

Cloud Network Security

Cloud Security Posture Management

Cloud Identity Security

Cloud Workload Protection (CWP)

Q79. Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

UUID

new Auth Code

CPU ID

API Key

In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade- the-vm-series-firewall/upgrade-the-vm-series-model

Q80. Which two template formats are supported by the Prisma Cloud infrastructure as code (laC) scan service?
(Choose two.)

ARM

XML

YAML

JSON

Q81. How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

purchase a new PAYG license from a reseller

go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

launch a new VM using the PAYG image

Loading …