2022 PSE-PrismaCloud Premium Files Test pdf - Free Dumps Collection
Get ready to pass the PSE-PrismaCloud Exam right now using our PSE-Prisma Cloud Professional Exam Package
NEW QUESTION 28
Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?
- A. Payment Card Industry DSS V3
- B. GDPR
- C. HIPAA
- D. CIS Benchmark
Answer: B
NEW QUESTION 29
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
- A. Resource Group
- B. ARM Template
- C. Bootstrapping
- D. Azure Application Insight
- E. Azure Security Center
Answer: B,C,D
NEW QUESTION 30
Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?
- A. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- B. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- C. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- D. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
Answer: A
NEW QUESTION 31
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)
- A. Serial Number
- B. Auth Code
- C. UUID
- D. CPU ID
- E. License Key
Answer: A,B,D
NEW QUESTION 32
Match the query type with its corresponding search
Answer:
Explanation:
Explanation
network where,
event where,
config where
NEW QUESTION 33
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. ISO 27001
- B. EU Data Protection Directive 95/46/EC
- C. GDPR
- D. Payment Card Industry 3.0
Answer: C
NEW QUESTION 34
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
- A. Palo Alto Networks provides full support if a valid support license is in place.
- B. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
- C. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
- D. Support for the templates is available through Professional Services from Palo Alto Networks.
Answer: C
NEW QUESTION 35
What is Prisma Public Cloud licensing based on?
- A. number of alerts generated
- B. number of monitored workloads
- C. volume of flow logs consumed
- D. number of accounts onboarded
Answer: B
NEW QUESTION 36
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. Inspector
- B. Shield
- C. Amazon Web Services WAF
- D. GuardDuty
Answer: A
NEW QUESTION 37
When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?
- A. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats
- B. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats
- C. Clone the predefined Strict Profile, with packet capture settings enabled
- D. Clone the predefined Strict Profile, with packet capture settings disabled
Answer: A
NEW QUESTION 38
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- A. CodeDeploy
- B. SQS
- C. SNS
- D. Lambda
Answer: D
NEW QUESTION 39
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- B. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC
- D. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- E. Group2 / SHA-1 / AES-128-GCM / IKE-V1
Answer: C,D,E
NEW QUESTION 40
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation is a procedural configuration management tool.
- B. CloudFormation is a declarative orchestration tool.
- C. CloudFormation templates can be written in JSON or YAML
- D. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
Answer: C,D
NEW QUESTION 41
Which cloud provider supports iLB-as-next-hop?
- A. Amazon Web Services
- B. Microsoft Azure
- C. Alibaba Cloud
- D. Oracle Cloud
Answer: B
NEW QUESTION 42
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
- A. iLB-as-next-hop
- B. traditional active/standby HA on VM-Series
- C. transit gateway and security VPC with VM-Series
- D. transit VPC and security VPC with VM-Series
Answer: B,C
NEW QUESTION 43
......
Master 2022 Latest The Questions PSE-Prisma Cloud Professional and Pass PSE-PrismaCloud Real Exam!: https://pass4sure.examcost.com/PSE-PrismaCloud-practice-exam.html
