Palo Alto Networks PSE-Prisma Cloud Professional PSE-PRISMACLOUD Questions & Answers

• Question 21:

  Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

  A. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

  B. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

  C. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

  D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

  Correct Answer: B

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment). network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000

• Question 22:

  A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

  A. set system setting mgmt-interface-swap enable yes

  B. set mgmt-interface settings swap yes

  C. set mgmt-interface swap yes

  D. set system setting mgmt-interface swap yes

  Correct Answer: A

• Question 23:

  What is Prisma Public Cloud licensing based on?

  A. number of alerts generated

  B. number of accounts onboarded

  C. number of monitored workloads

  D. volume of flow logs consumed

  Correct Answer: C

• Question 24:

  Which three services can Google Cloud Security Scanner assess? (Choose three.)

  A. Google Kubernetes Engine

  B. BigQuery

  C. Compute Engine

  D. App Engine

  E. Google Virtual Private Cloud

  Correct Answer: ACD

• Question 25:

  What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

  A. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

  B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

  C. create a bootstrap file that includes the mgmt-interface-swap command

  D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

  Correct Answer: CD

  https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for-google-internal-loadbalancing.html

• Question 26:

  Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance? (Choose two.)

  A. UUID

  B. new Auth Code

  C. CPU ID

  D. API Key

  Correct Answer: AC

  In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.

  https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-the-vm-series-firewall/upgrade-the-vm-series-model

• Question 27:

  What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

  A. through ARM Templates in the GitHub Repository

  B. through Solution Templates in the Azure Marketplace

  C. through Expedition in the Customer Success Portal

  D. through Iron Skillets in the GitHub Repository

  Correct Answer: AC

• Question 28:

  Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

  A. Create alert rules.

  B. Whitelist IP addresses.

  C. Configure User-ID.

  D. Define enterprise settings.

  Correct Answer: D

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html

• Question 29:

  The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW. Which component handles address translation?

  A. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

  B. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

  C. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

  D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

  Correct Answer: B

• Question 30:

  What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

  A. VM Monitoring

  B. External Dynamic List

  C. CFT Template

  D. XML API

  Correct Answer: AD

  https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/use-dynamic-address-groups-in-policy