Palo Alto Networks PSE-PrismaCloud Exam Practice Test Instant Access

Question 1

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

ABoth Source and Destination Checks are disabled

BBoth Source and Destination Checks are enabled

CSource Check is disabled and Destination Check is enabled

DSource Check is enabled and Destination Check is disabled

Answer : A

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Question 2

Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance? (Choose two.)

AUUID

Bnew Auth Code

CCPU ID

DAPI Key

Answer : B, D

In a public cloud deployment, if your firewall is licensed with the BYOL option, you mustDeactivate VMbefore you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-the-vm-series-firewall/upgrade-the-vm-series-model

Question 3

Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)

AGoogle Cloud Platform

BMicrosoft Azure

COracle Cloud

DAmazon Web Services

Answer : A, B

Question 4

can you create a custom compliance standard in Prisma Public Cloud?

AGenerate a new Compliance Report.

BCreate compliance framework in a spreadsheet then import into Prisma Public Cloud.

CFrom Compliance tab, clone a default framework and customize.

DFrom Compliance tab > Compliance Standards, click 'Add New.'

Answer : D

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-custom-compliance-standard

Question 5

Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

AShield

BInspector

CGuardDuty

DAmazon Web Services WAF

Answer : B

Question 6

What happens in Prisma Cloud after Training Model Threshold or Alert Disposition is changed?

AChanges will take effect after a new learning phase of 30 days.

BSystem will perform a reboot, deleting all past alerts.

CExisting alerts and new alerts are regenerated based on the new setting.

DNew alerts are generated based on the new setting.

Answer : C

Question 7

A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.

Which type of Resource Query Language (RQL) query would be used in this policy?

Aaudit from

Bnetwork from

Cevent from

Dconfig from

Answer : A

Palo Alto Networks System Engineer - Prisma Cloud PSE-PrismaCloud Exam Practice Test