PSE-PrismaCloud Dumps with Free 365 Days Update Fast Exam Updates

Verified PSE-PrismaCloud dumps Q&As - 2023 Latest PSE-PrismaCloud Download

NEW QUESTION # 13
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

• A. Configure an Inventory report from the "Alerts" tab
• B. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
• C. Generate a compliance report from the Compliance dashboard
• D. Write an RQL query from the "Investigate" tab.

Answer: B,D

NEW QUESTION # 14
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

• A. Direct Connect
• B. ExpressRoute
• C. IPsecVPN
• D. Fast Connect

Answer: B,C

Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

NEW QUESTION # 15
What is Prisma Public Cloud licensing based on?

• A. number of accounts onboarded
• B. volume of flow logs consumed
• C. number of alerts generated
• D. number of monitored workloads

Answer: D

NEW QUESTION # 16
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

• A. policies
• B. notification templates
• C. RQL queries
• D. alert rules

Answer: A

NEW QUESTION # 17
What are three examples of outbound traffic flow? (Choose three.)

• A. issue yum update command on an instance inside Amazon Web Services
• B. outgoing Prisma Public Cloud API calls
• C. issue apt-get install command on an instance inside Amazon Web Services
• D. Microsoft Windows inside Azure requesting a security patch
• E. web server inside Amazon Web Services receiving web requests from internet

Answer: A,B,C

NEW QUESTION # 18
Match the logging service with its cloud provider.

Answer:

Explanation:

Explanation
AWS, Azure, GCP, Azure, AWS, GCP

NEW QUESTION # 19
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

• A. Custom threat signature
• B. QoS Profile to limit incoming requests
• C. DoS Protection Profile with specific session counts
• D. Zone Protection Profile

Answer: D

NEW QUESTION # 20
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?

• A. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
• B. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
• C. network where dest.resource IN (resource where role = 'Database'}
• D. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))

Answer: B

NEW QUESTION # 21
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

• A. source and destination address translation
• B. destination address translation
• C. port address translation
• D. source address translation

Answer: D

NEW QUESTION # 22
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

• A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
• B. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
• C. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
• D. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

Answer: B

NEW QUESTION # 23
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

• A. Amazon Web Services WAF
• B. Inspector
• C. GuardDuty
• D. Shield

Answer: C

Explanation:
Explanation
http://www.paloguard.com/datasheets/prisma-cloud-on-aws.pdf

NEW QUESTION # 24
Which cloud provider supports iLB-as-next-hop?

• A. Alibaba Cloud
• B. Microsoft Azure
• C. Oracle Cloud
• D. Amazon Web Services

Answer: B

NEW QUESTION # 25
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Answer:

Explanation:

Explanation
longest, shortest, path, lowest multi, lowest peer

NEW QUESTION # 26
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

• A. transit VPC and security VPC with VM-Series
• B. transit gateway and security VPC with VM-Series
• C. iLB-as-next-hop
• D. traditional active/standby HA on VM-Series

Answer: A,D

NEW QUESTION # 27
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

• A. Payment Card Industry DSS V3
• B. GDPR
• C. CIS Benchmark
• D. HIPAA

Answer: C

NEW QUESTION # 28
......

Updated Palo Alto Networks Study Guide PSE-PrismaCloud Dumps Questions: https://prepaway.dumptorrent.com/PSE-PrismaCloud-braindumps-torrent.html