PSE-PrismaCloud Dumps PDF - PSE-PrismaCloud Real Exam Questions Answers
Get Started: PSE-PrismaCloud Exam [2021] Dumps Palo Alto Networks PDF Questions
NEW QUESTION 34
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
- B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- C. create a bootstrap file that includes the mgmt-interface-swap command
- D. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
Answer: A,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 35
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- B. Generate a compliance report from the Compliance dashboard
- C. Write an RQL query from the "Investigate" tab.
- D. Configure an Inventory report from the "Alerts" tab
Answer: A,C
NEW QUESTION 36
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. QoS Profile to limit incoming requests
- B. DoS Protection Profile with specific session counts
- C. Zone Protection Profile
- D. Custom threat signature
Answer: C
NEW QUESTION 37
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be written in JSON or YAML
- B. CloudFormation is a procedural configuration management tool.
- C. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- D. CloudFormation is a declarative orchestration tool.
Answer: A,D
NEW QUESTION 38
Which cloud provider supports iLB-as-next-hop?
- A. Amazon Web Services
- B. Oracle Cloud
- C. Alibaba Cloud
- D. Microsoft Azure
Answer: A
NEW QUESTION 39
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. VM-Series firewalls
- B. Traps
- C. Amazon Web Services WAF
- D. Security Groups
- E. Prisma SaaS
Answer: A,B,C
NEW QUESTION 40
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Answer:
Explanation:
NEW QUESTION 41
What are three examples of outbound traffic flow? (Choose three.)
- A. issue apt-get install command on an instance inside Amazon Web Services
- B. Microsoft Windows inside Azure requesting a security patch
- C. issue yum update command on an instance inside Amazon Web Services
- D. outgoing Prisma Public Cloud API calls
- E. web server inside Amazon Web Services receiving web requests from internet
Answer: A,C,D
NEW QUESTION 42
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- A. AWS ALB
- B. AWS NLB
- C. AWS NAT Gateway
- D. AWS CDN
Answer: A,D
NEW QUESTION 43
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- A. policies
- B. notification templates
- C. alert rules
- D. RQL queries
Answer: A
NEW QUESTION 44
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. GDPR
- B. HIPAA
- C. Payment Card Industry DSS V3
- D. CIS Benchmark
Answer: A
NEW QUESTION 45
Which Google Cloud Platform project shares its VPC networks with other projects?
- A. Service project
- B. Host project
- C. Subscribing project
- D. Admin project
Answer: B
Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 46
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. API Key
- B. UUID
- C. new Auth Code
- D. CPU ID
Answer: A,C
Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th
NEW QUESTION 47
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Transit Gateway
- B. Customer Gateway
- C. Internet Gateway
- D. Virtual Private Gateway
Answer: A
NEW QUESTION 48
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
Explanation
backup, register, deploy, activate, load
NEW QUESTION 49
......
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
PSE-PrismaCloud Premium Exam Engine pdf Download: https://www.testinsides.top/PSE-PrismaCloud-dumps-review.html
Verified PSE-PrismaCloud Bundle Real Exam Dumps PDF: https://drive.google.com/open?id=1YRNHC9F9PQSGsZ-xD-y1MF1rYmM1nxGv