[UPDATED Nov-2023] Best Value Available Preparation Guide for PSE-PrismaCloud Exam
1 Full PSE-PrismaCloud Practice Test and 62 Unique Questions, Get it Now!
The PSE-PrismaCloud exam is a certification exam offered by Palo Alto Networks to certify the knowledge and skills of system engineers in the Prisma Cloud platform. Prisma Cloud is a cloud-native security platform that provides comprehensive visibility, threat detection, and compliance management across multi-cloud and hybrid environments. The PSE-PrismaCloud exam is designed to test the knowledge and expertise of system engineers in the deployment, configuration, and management of the Prisma Cloud platform.
NEW QUESTION # 25
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. launch a new VM using the PAYG image
- B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- C. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- D. purchase a new PAYG license from a reseller
Answer: A
NEW QUESTION # 26
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Source Check is enabled and Destination Check is disabled
- B. Both Source and Destination Checks are enabled
- C. Source Check is disabled and Destination Check is enabled
- D. Both Source and Destination Checks are disabled
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us
NEW QUESTION # 27
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. destination address translation
- B. source address translation
- C. port address translation
- D. source and destination address translation
Answer: B
NEW QUESTION # 28
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Security Groups
- B. VM-Series firewalls
- C. Traps
- D. Prisma SaaS
- E. Amazon Web Services WAF
Answer: A,B,D
NEW QUESTION # 29
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-500
- C. VM-100
- D. VM-300
Answer: D
NEW QUESTION # 30
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?
- A. infrastructure as a service
- B. infrastructure as code
- C. platform as a service
- D. software as code
Answer: A
NEW QUESTION # 31
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- A. SQS
- B. SNS
- C. Lambda
- D. CodeDeploy
Answer: C
NEW QUESTION # 32
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Resource Group
- B. Azure Security Center
- C. ARM Template
- D. Bootstrapping
- E. Azure Application Insight
Answer: B,D,E
NEW QUESTION # 33
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
NEW QUESTION # 34
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- C. launch a new VM using the PAYG image
- D. purchase a new PAYG license from a reseller
Answer: A
NEW QUESTION # 35
Match the query type with its corresponding search
Answer:
Explanation:
NEW QUESTION # 36
What are three examples of outbound traffic flow? (Choose three.)
- A. issue apt-get install command on an instance inside Amazon Web Services
- B. outgoing Prisma Public Cloud API calls
- C. Microsoft Windows inside Azure requesting a security patch
- D. issue yum update command on an instance inside Amazon Web Services
- E. web server inside Amazon Web Services receiving web requests from internet
Answer: A,B,C
NEW QUESTION # 37
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
- A. user where
- B. compliance where
- C. config where
- D. network where
- E. event where
Answer: B,D,E
NEW QUESTION # 38
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
Explanation
backup, register, deploy, activate, load
NEW QUESTION # 39
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 40
Match the logging service with its cloud provider.
Answer:
Explanation:
Explanation
AWS, Azure, GCP, Azure, AWS, GCP
NEW QUESTION # 41
Which three services can Google Cloud Security Scanner assess? (Choose three.)
- A. Google Virtual Private Cloud
- B. BigQuery
- C. App Engine
- D. Google Kubernetes Engine
- E. Compute Engine
Answer: C,D,E
NEW QUESTION # 42
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- B. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
- C. create a bootstrap file that includes the mgmt-interface-swap command
- D. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
Answer: B,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION # 43
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group2 / SHA-1 / AES-128-GCM / IKE-V1
- B. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- D. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- E. Group2 / SHA-1 / AES-128-CBC
Answer: A,D,E
NEW QUESTION # 44
Which cloud provider supports iLB-as-next-hop?
- A. Microsoft Azure
- B. Oracle Cloud
- C. Alibaba Cloud
- D. Amazon Web Services
Answer: A
NEW QUESTION # 45
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- B. CloudFormation is a declarative orchestration tool.
- C. CloudFormation templates can be written in JSON or YAML
- D. CloudFormation is a procedural configuration management tool.
Answer: B,C
NEW QUESTION # 46
What is the scope of the Amazon Web Services 1AM Service?
- A. regional
- B. zonal
- C. global
- D. VPC
Answer: C
NEW QUESTION # 47
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)
- A. through Expedition in the Customer Success Portal
- B. through Iron Skillets in the GitHub Repository
- C. through Solution Templates in the Azure Marketplace
- D. through ARM Templates in the GitHub Repository
Answer: C,D
NEW QUESTION # 48
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. iLB-as-next-hop
- B. transit VPC and security VPC with VM-Series
- C. traditional active/standby HA on VM-Series
- D. transit gateway and security VPC with VM-Series
Answer: B,C
NEW QUESTION # 49
......
Get Instant Access to PSE-PrismaCloud Practice Exam Questions: https://www.2pass4sure.com/PSE-Prisma-Cloud-Professional/PSE-PrismaCloud-actual-exam-braindumps.html
The Best PSE-PrismaCloud Exam Study Material Premium Files and Preparation Tool: https://drive.google.com/open?id=1LLREzrTMTvJP8GyqmO6c-E-GS7yhsldD