File Info
| Exam | Palo Alto Networks System Engineer-Prisma Cloud |
| Number | PSE-PrismaCloud |
| File Name | Palo Alto Networks.PSE-PrismaCloud.VCEplus.2025-02-25.34q.vcex |
| Size | 451 KB |
| Posted | Feb 25, 2025 |
| Download | Palo Alto Networks.PSE-PrismaCloud.VCEplus.2025-02-25.34q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?
- RQL queries
- alert rules
- notification templates
- policies
Correct answer: D
Question 2
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- Both Source and Destination Checks are disabled
- Both Source and Destination Checks are enabled
- Source Check is disabled and Destination Check is enabled
- Source Check is enabled and Destination Check is disabled
Correct answer: A
Explanation:
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud
Question 3
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
- AWS CDN
- AWS NAT Gateway
- AWS ALB
- AWS NLB
Correct answer: AC
Question 4
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)
- Traps
- Prisma SaaS
- Amazon Web Services WAF
- VM-Series firewalls
- Security Groups
Correct answer: ACD
Question 5
Which RQL string searches for all EBS volumes that do not have a 'DataClassification' tag?
- config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification
- config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification
- config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists
- config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1
Correct answer: B
Question 6
Which three services can Google Cloud Security Scanner assess? (Choose three.)
- Google Kubernetes Engine
- BigQuery
- Compute Engine
- App Engine
- Google Virtual Private Cloud
Correct answer: ACD
Question 7
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
- fully instrumented API
- Aperture Orchestration Engine
- VM Orchestration Policy Editor
- support for Dynamic Address Groups
Correct answer: AD
Question 8
Which change represents a VM-Series NGFW license transfer?
- VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
- VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
- VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
- VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services
Correct answer: C
Question 9
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?
- SNS
- SQS
- CodeDeploy
- Lambda
Correct answer: D
Question 10
What are two examples of Amazon Web Services logging services? (Choose two.)
- CloudLog
- CloudEvent
- CloudWatch
- CIoudTrail
Correct answer: CD
Question 11
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
- Excessive login failures
- Unusual user activity
- Denial-of-service activity
- Account hijacking attempts
- Suspicious file activity
Correct answer: ABD
Explanation:
Account hijacking attempts---Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel, or login from a previously unknown browser, operating system, or location.Excessive login failures---Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.Unusual user activity---Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html Account hijacking attempts
---Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel, or login from a previously unknown browser, operating system, or location.
Excessive login failures
---Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
---Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html
