Palo Alto Networks PSE PrismaCloud Exam Questions (60 Q&As)

1. Which two statements are true about CloudFormation? (Choose two.)

CloudFormation is a procedural configuration management tool.

CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

CloudFormation templates can be written in JSON or YAML

CloudFormation is a declarative orchestration tool.

2. DRAG DROP

Match the query type with its corresponding search

3. DRAG DROP

Match the logging service with its cloud provider.

4. Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

HIPAA

CIS Benchmark

Payment Card Industry DSS V3

GDPR

5. An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers).

Which is a valid IP address to manage the VM-Series NGFW?

10.0.1.254

10.0.2.1

10.0.3.255

10.0.3.1

6. Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

7. A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks.

What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

Custom threat signature

Zone Protection Profile

QoS Profile to limit incoming requests

DoS Protection Profile with specific session counts

8. How can you modify a range of dates default policy in Prisma Public Cloud?

Override the value and commit the configuration.

Clone the existing policy and change the value.

Manually create the RQL statement.

Click the Gear icon next to the policy name to open the Edit Policy dialog

9. Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Traps

Prisma SaaS

Amazon Web Services WAF

VM-Series firewalls

Security Groups

10. Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

iLB-as-next-hop

transit gateway and security VPC with VM-Series

traditional active/standby HA on VM-Series

transit VPC and security VPC with VM-Series

11. What are two examples of Amazon Web Services logging services? (Choose two.)

CloudLog

CloudEvent

CloudWatch

CIoudTrail

12. What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Both Source and Destination Checks are disabled

Both Source and Destination Checks are enabled

Source Check is disabled and Destination Check is enabled

Source Check is enabled and Destination Check is disabled

13. How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

Create an RQL config query to identify resources with the tag "Private."

Create an RQL network query to identify traffic from resources tagged "Private."

Open the Asset Dashboard, filter on tags: and choose "Private."

Generate a CIS compliance report and review the "Asset Summary."

14. Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)

Google Cloud Platform

Microsoft Azure

Oracle Cloud

Amazon Web Services

15. What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

create a bootstrap file that includes the mgmt-interface-swap command

in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Question 1 of 15

Test Online Palo Alto Networks PSE PrismaCloud Free Questions

Leave a Reply Cancel reply