Free Palo Alto Networks (PSE-PrismaCloud) Certification Sample Questions with Online Practice Test [Q20-Q40]

admin PSE-PrismaCloud Palo Alto Networks September 24, 2023

4.5/5 - (2 votes)

Free Palo Alto Networks (PSE-PrismaCloud) Certification Sample Questions with Online Practice Test

PSE-PrismaCloud Certification Study Guide Pass PSE-PrismaCloud Fast

NEW QUESTION 20
A customer CSO has asked you to demonstrate how to identify all “Amazon RDS” resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

Generate a compliance report from the Compliance dashboard

Write an RQL query from the “Investigate” tab.

Configure an Inventory report from the “Alerts” tab

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

NEW QUESTION 21
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Both Source and Destination Checks are disabled

Both Source and Destination Checks are enabled

Source Check is disabled and Destination Check is enabled

Source Check is enabled and Destination Check is disabled

Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us

NEW QUESTION 22
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

Shield

Inspector

GuardDuty

Amazon Web Services WAF

Explanation
http://www.paloguard.com/datasheets/prisma-cloud-on-aws.pdf

NEW QUESTION 23
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

Shield

Inspector

GuardDuty

Amazon Web Services WAF

NEW QUESTION 24
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

VM-GCP

VM-100

VM-500

VM-300

Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

NEW QUESTION 25
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

AWS CDN

AWS NAT Gateway

AWS ALB

AWS NLB

NEW QUESTION 26
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

UUID

new Auth Code

CPU ID

API Key

Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th

NEW QUESTION 27
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

NEW QUESTION 28
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

NEW QUESTION 29
Which cloud provider supports iLB-as-next-hop?

Microsoft Azure

Alibaba Cloud

Oracle Cloud

Amazon Web Services

NEW QUESTION 30
Which two statements are true about CloudFormation? (Choose two.)

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

NEW QUESTION 31
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Traps

Prisma SaaS

Amazon Web Services WAF

VM-Series firewalls

Security Groups

NEW QUESTION 32
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

Direct Connect

Fast Connect

IPsecVPN

ExpressRoute

Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

NEW QUESTION 33
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

Serial Number

CPU ID

Auth Code

License Key

UUID

NEW QUESTION 34
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

Public IP for the VM-Series NGFW

NAT appliance

Azure Stack Edge Router

Border Customer Network

NEW QUESTION 35
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Explanation
longest, shortest, path, lowest multi, lowest peer

NEW QUESTION 36
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

purchase a new PAYG license from a reseller

go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

launch a new VM using the PAYG image

NEW QUESTION 37
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

NEW QUESTION 38
Which Google Cloud Platform project shares its VPC networks with other projects?

Service project

Host project

Admin project

Subscribing project

Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

NEW QUESTION 39
A customer CSO has asked you to demonstrate how to identify all “Amazon RDS” resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

Generate a compliance report from the Compliance dashboard

Write an RQL query from the “Investigate” tab.

Configure an Inventory report from the “Alerts” tab

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

NEW QUESTION 40
What are three examples of outbound traffic flow? (Choose three.)

issue yum update command on an instance inside Amazon Web Services

Microsoft Windows inside Azure requesting a security patch

web server inside Amazon Web Services receiving web requests from internet

issue apt-get install command on an instance inside Amazon Web Services

outgoing Prisma Public Cloud API calls

Loading …