2021 Realistic Verified Free Palo Alto Networks PSE-PrismaCloud Exam Questions
PSE-PrismaCloud Real Exam Questions and Answers FREE
NEW QUESTION 37
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. License Key
- B. UUID
- C. CPU ID
- D. Serial Number
- E. Auth Code
Answer: C,D,E
NEW QUESTION 38
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. ExpressRoute
- B. Direct Connect
- C. Fast Connect
- D. IPsecVPN
Answer: A,D
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
NEW QUESTION 39
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION 40
An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?
- A. 10.0.1.254
- B. 10.0.2.1
- C. 10.0.3.1
- D. 10.0.3.255
Answer: C
NEW QUESTION 41
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. new Auth Code
- B. CPU ID
- C. UUID
- D. API Key
Answer: B,C
Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th
NEW QUESTION 42
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. transit VPC and security VPC with VM-Series
- B. traditional active/standby HA on VM-Series
- C. transit gateway and security VPC with VM-Series
- D. iLB-as-next-hop
Answer: B,C
NEW QUESTION 43
What is Prisma Public Cloud licensing based on?
- A. volume of flow logs consumed
- B. number of accounts onboarded
- C. number of monitored workloads
- D. number of alerts generated
Answer: C
NEW QUESTION 44
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. GDPR
- B. HIPAA
- C. Payment Card Industry DSS V3
- D. CIS Benchmark
Answer: A
NEW QUESTION 45
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group2 / SHA-1 / AES-128-CBC
- B. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- D. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-GCM / IKE-V1
Answer: A,B,E
NEW QUESTION 46
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. GDPR
- B. CIS Benchmark
- C. HIPAA
- D. Payment Card Industry DSS V3
Answer: B
NEW QUESTION 47
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-300
- C. VM-500
- D. VM-100
Answer: B
NEW QUESTION 48
Which cloud provider supports iLB-as-next-hop?
- A. Amazon Web Services
- B. Oracle Cloud
- C. Alibaba Cloud
- D. Microsoft Azure
Answer: A
NEW QUESTION 49
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- B. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings disabled
- D. Clone the predefined Strict Profile, with packet capture settings enabled
Answer: B
NEW QUESTION 50
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?
- A. QoS Profile to limit incoming requests
- B. DoS Protection Profile with specific session counts
- C. Zone Protection Profile
- D. Custom threat signature
Answer: B
NEW QUESTION 51
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Public IP for the VM-Series NGFW
- B. Azure Stack Edge Router
- C. NAT appliance
- D. Border Customer Network
Answer: B
NEW QUESTION 52
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
Answer:
Explanation:
Explanation
backup, register, deploy, activate, load
NEW QUESTION 53
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- A. Amazon Web Services WAF
- B. VM-Series firewalls
- C. Traps
- D. Prisma SaaS
- E. Security Groups
Answer: B,D,E
NEW QUESTION 54
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Answer:
Explanation:
NEW QUESTION 55
can you create a custom compliance standard in Prisma Public Cloud?
- A. From Compliance tab > Compliance Standards, click "Add New."
- B. Generate a new Compliance Report.
- C. From Compliance tab, clone a default framework and customize.
- D. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c
NEW QUESTION 56
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-300
- C. VM-500
- D. VM-100
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
NEW QUESTION 57
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Transit Gateway
- B. Customer Gateway
- C. Internet Gateway
- D. Virtual Private Gateway
Answer: A
NEW QUESTION 58
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Source Check is disabled and Destination Check is enabled
- B. Both Source and Destination Checks are enabled
- C. Source Check is enabled and Destination Check is disabled
- D. Both Source and Destination Checks are disabled
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us
NEW QUESTION 59
Which change represents a VM-Series NGFW license transfer?
- A. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
- B. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
- C. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
- D. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
Answer: D
NEW QUESTION 60
......
Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 11 |
|
Exam Dumps PSE-PrismaCloud Practice Free Latest Palo Alto Networks Practice Tests: https://www.pass4surequiz.com/PSE-PrismaCloud-exam-quiz.html
PSE-PrismaCloud Exam Questions | Real PSE-PrismaCloud Practice Dumps: https://drive.google.com/open?id=1fJPTM5mB6-VDXMf9QwW74gASkhzR3NQn