Palo Alto Networks PSE-PrismaCloud Exam Practice Test Instant Access

Question 1

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.

What must be configured on the firewall to avoid asymmetric routing?

Asource address translation

Bdestination address translation

Cport address translation

Dsource and destination address translation

Answer : A

Question 2

In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

Afully instrumented API

BAperture Orchestration Engine

CVM Orchestration Policy Editor

Dsupport for Dynamic Address Groups

Answer : A, D

Question 3

How can a range of dates in the Prisma Cloud default policy be modified?

AClone the existing policy and change the value.

BClick the gear icon next to the policy name to open the 'Edit Policy' dialog.

CManually create the Resource Query Language (RQL) statement.

DOverride the value and commit the configuration.

Answer : A

Question 4

Which two template formats are supported by the Prisma Cloud infrastructure as code (laC) scan service? (Choose two.)

AARM

BXML

CYAML

DJSON

Answer : A, C

Question 5

A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

ACustom threat signature

BZone Protection Profile

CQoS Profile to limit incoming requests

DDoS Protection Profile with specific session counts

Answer : D

Question 6

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

ABoth Source and Destination Checks are disabled

BBoth Source and Destination Checks are enabled

CSource Check is disabled and Destination Check is enabled

DSource Check is enabled and Destination Check is disabled

Answer : A

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Question 7

Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

AShield

BInspector

CGuardDuty

DAmazon Web Services WAF

Answer : B

Palo Alto Networks PSE-PrismaCloud Palo Alto Networks System Engineer - Prisma Cloud Exam Practice Test