Palo Alto Networks PSE-Prisma Cloud Professional PSE-PRISMACLOUD Questions & Answers

• Question 41:

  Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

  A. GDPR

  B. EU Data Protection Directive 95/46/EC

  C. ISO 27001

  D. Payment Card Industry 3.0

  Correct Answer: B

• Question 42:

  Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

  A. Azure Application Insight

  B. Resource Group

  C. Azure Security Center

  D. Bootstrapping

  E. ARM Template

  Correct Answer: ADE

• Question 43:

  How is license utilization displayed within the Prisma Public Cloud interface?

  A. navigate to the CLI and run show license command

  B. navigate to General > Licensing

  C. navigate to Dashboard > Asset Inventory

  D. navigate to Settings (via the gear icon) > Licensing

  Correct Answer: D

• Question 44:

  Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

  A. Serial Number

  B. CPU ID

  C. Auth Code

  D. License Key

  E. UUID

  Correct Answer: ABC

• Question 45:

  The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

  A. Direct Connect

  B. Fast Connect

  C. IPsecVPN

  D. ExpressRoute

  Correct Answer: CD

  https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

• Question 46:

  Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

  A. iLB-as-next-hop

  B. transit gateway and security VPC with VM-Series

  C. traditional active/standby HA on VM-Series

  D. transit VPC and security VPC with VM-Series

  Correct Answer: CD

• Question 47:

  When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

  A. Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

  B. Clone the predefined Strict Profile, with packet capture settings disabled

  C. Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

  D. Clone the predefined Strict Profile, with packet capture settings enabled

  Correct Answer: A

• Question 48:

  Which Prisma Public Cloud policy alerts administrators to unusual user activity?

  A. Anomaly

  B. Audit Event

  C. Network

  D. Configuration

  Correct Answer: A

  https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html

• Question 49:

  A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

  A. Generate a compliance report from the Compliance dashboard

  B. Write an RQL query from the "Investigate" tab.

  C. Configure an Inventory report from the "Alerts" tab

  D. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.

  Correct Answer: AD

• Question 50:

  Which cloud provider supports iLB-as-next-hop?

  A. Microsoft Azure

  B. Alibaba Cloud

  C. Oracle Cloud

  D. Amazon Web Services

  Correct Answer: D