Palo Alto Networks PSE-Prisma Cloud Professional PSE-PRISMACLOUD Questions & Answers

• Question 31:

  Which Google Cloud Platform project shares its VPC networks with other projects?

  A. Service project

  B. Host project

  C. Admin project

  D. Subscribing project

  Correct Answer: B

  Create a shared VPC using the Trust VPC created when you deployed the firewall template.

  Set up a shared VPC for the host (firewall) project:

  gcloud compute shared-vpc enable HOST_PROJECT_ID

  https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/autoscaling-on-google-cloud-platform/deploy-autoscaling-on-google-cloud.html

• Question 32:

  Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

  A. config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

  B. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

  C. config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

  D. config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

  Correct Answer: D

• Question 33:

  What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

  A. VM-GCP

  B. VM-100

  C. VM-500

  D. VM-300

  Correct Answer: D

  https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud.html

• Question 34:

  An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

  A. 10.0.1.254

  B. 10.0.2.1

  C. 10.0.3.255

  D. 10.0.3.1

  Correct Answer: D

• Question 35:

  Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

  

  A. 4

  B. 5

  C. 3

  D. 1

  Correct Answer: C

• Question 36:

  Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)

  A. Google Cloud Platform

  B. Microsoft Azure

  C. Oracle Cloud

  D. Amazon Web Services

  Correct Answer: AC

• Question 37:

  In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

  A. fully instrumented API

  B. Aperture Orchestration Engine

  C. VM Orchestration Policy Editor

  D. support for Dynamic Address Groups

  Correct Answer: BD

• Question 38:

  The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic. How does Amazon Web Services achieve this integration?

  A. SNS

  B. SQS

  C. CodeDeploy

  D. Lambda

  Correct Answer: D

• Question 39:

  Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

  A. Traps

  B. Prisma SaaS

  C. Amazon Web Services WAF

  D. VM-Series firewalls

  E. Security Groups

  Correct Answer: BDE

• Question 40:

  How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

  A. purchase a new PAYG license from a reseller

  B. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

  C. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

  D. launch a new VM using the PAYG image

  Correct Answer: B