File Info
| Exam | Palo Alto Networks System Engineer-Prisma Cloud |
| Number | PSE-PrismaCloud |
| File Name | Palo Alto Networks.PSE-PrismaCloud.VCEplus.2025-02-25.34q.tqb |
| Size | 559 KB |
| Posted | Feb 25, 2025 |
| Download | Palo Alto Networks.PSE-PrismaCloud.VCEplus.2025-02-25.34q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- RQL queries
- alert rules
- notification templates
- policies
Correct answer: D
Question 2
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- Both Source and Destination Checks are disabled
- Both Source and Destination Checks are enabled
- Source Check is disabled and Destination Check is enabled
- Source Check is enabled and Destination Check is disabled
Correct answer: A
Explanation:
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud
Question 3
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- AWS CDN
- AWS NAT Gateway
- AWS ALB
- AWS NLB
Correct answer: AC
Question 4
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- Traps
- Prisma SaaS
- Amazon Web Services WAF
- VM-Series firewalls
- Security Groups
Correct answer: ACD
Question 5
Which RQL string searches for all EBS volumes that do not have a 'DataClassification' tag?
- config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
Correct answer: B
Question 6
Which three services can Google Cloud Security Scanner assess? (Choose three.)
- Google Kubernetes Engine
- BigQuery
- Compute Engine
- App Engine
- Google Virtual Private Cloud
Correct answer: ACD
Question 7
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- fully instrumented API
- Aperture Orchestration Engine
- VM Orchestration Policy Editor
- support for Dynamic Address Groups
Correct answer: AD
Question 8
Which change represents a VM-Series NGFW license transfer?
- VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
- VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
- VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
- VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
Correct answer: C
Question 9
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- SNS
- SQS
- CodeDeploy
- Lambda
Correct answer: D
Question 10
What are two examples of Amazon Web Services logging services? (Choose two.)
- CloudLog
- CloudEvent
- CloudWatch
- CIoudTrail
Correct answer: CD
