Ultimate Guide to the PSE-PrismaCloud - Latest Nov 16, 2021 Edition Available Now [Q20-Q37]

Ultimate Guide to the PSE-PrismaCloud - Latest Nov 16, 2021 Edition Available Now

2021 Updated Verified Pass PSE-PrismaCloud Exam - Real Questions & Answers

NEW QUESTION 20
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

• A. Excessive login failures
• B. Denial-of-service activity
• C. Unusual user activity
• D. Account hijacking attempts
• E. Suspicious file activity

Answer: A,C,D

Explanation:
Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli

 

NEW QUESTION 21
What are three examples of outbound traffic flow? (Choose three.)

• A. issue apt-get install command on an instance inside Amazon Web Services
• B. Microsoft Windows inside Azure requesting a security patch
• C. issue yum update command on an instance inside Amazon Web Services
• D. outgoing Prisma Public Cloud API calls
• E. web server inside Amazon Web Services receiving web requests from internet

Answer: A,C,D

 

NEW QUESTION 22
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?

• A. VM-GCP
• B. VM-300
• C. VM-500
• D. VM-100

Answer: B

 

NEW QUESTION 23
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

• A. Public IP for the VM-Series NGFW
• B. NAT appliance
• C. Border Customer Network
• D. Azure Stack Edge Router

Answer: B

 

NEW QUESTION 24
Match the query type with its corresponding search

Answer:

Explanation:

 

NEW QUESTION 25
Which cloud provider supports iLB-as-next-hop?

• A. Amazon Web Services
• B. Oracle Cloud
• C. Alibaba Cloud
• D. Microsoft Azure

Answer: A

 

NEW QUESTION 26
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

• A. transit VPC and security VPC with VM-Series
• B. traditional active/standby HA on VM-Series
• C. transit gateway and security VPC with VM-Series
• D. iLB-as-next-hop

Answer: B,C

 

NEW QUESTION 27
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

• A. set mgmt-interface swap yes
• B. set system setting mgmt-interface swap yes
• C. set system setting mgmt-interface-swap enable yes
• D. set mgmt-interface settings swap yes

Answer: C

 

NEW QUESTION 28
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

• A. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
• B. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
• C. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
• D. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

Answer: C

Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000

 

NEW QUESTION 29
What is the scope of the Amazon Web Services IAM Service?

• A. global
• B. regional
• C. zonal
• D. VPC

Answer: A

 

NEW QUESTION 30
Which Google Cloud Platform project shares its VPC networks with other projects?

• A. Service project
• B. Host project
• C. Subscribing project
• D. Admin project

Answer: B

Explanation:
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

 

NEW QUESTION 31
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

• A. event where
• B. compliance where
• C. network where
• D. config where
• E. user where

Answer: A,B,C

 

NEW QUESTION 32
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

• A. API Key
• B. UUID
• C. new Auth Code
• D. CPU ID

Answer: A,C

Explanation:
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th

 

NEW QUESTION 33
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

• A. compliance where
• B. event where
• C. config where
• D. network where
• E. user where

Answer: B,C,D

 

NEW QUESTION 34
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

• A. 0
• B. 1
• C. 2
• D. 3

Answer: B

 

NEW QUESTION 35
Which cloud provider supports iLB-as-next-hop?

• A. Oracle Cloud
• B. Microsoft Azure
• C. Amazon Web Services
• D. Alibaba Cloud

Answer: B

 

NEW QUESTION 36
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

• A. Amazon Web Services
• B. Google Cloud Platform
• C. Oracle Cloud
• D. Microsoft Azure

Answer: B,C

 

NEW QUESTION 37
......

Palo Alto Networks PSE-PrismaCloud Exam Syllabus Topics:

Topic	Details
Topic 1	Effectively lead and support customer demonstrations with our System Engineers that showcase our value
Topic 2	Provide design consultation and standard methodology mentorship for rollout|Provide technical demos for strategic prospects and current accounts of Palo Alto Networks virtual offerings and integration in existing data center environments
Topic 4	Interact locally and remotely with customers in an equally persuasive, confident manner
Topic 5	Assist with the training of new System Engineers in their designated region in installs customer presentations, and internally-focused deal preparation activities
Topic 6	Lead conversations about industry trends and emerging changes Support relationship expansion with top existing partners for Public Cloud
Topic 7	Be the technical voice of Sales for all things related to security and compliance in Public Cloud
Topic 8	Help develop relationships with new Born-in-the-Cloud partners who will be integral in winning over new customers
Topic 9	Ability to discuss, with credibility, competitive offers in the marketplace and effectively differentiate against them
Topic 10	Act as the customers advocate for any issues that require technical assistance and follow up with the customer until the issue is resolved
Topic 11	Strategy planning for moving critical data, intellectual property Experience as a system engineer, solutions architect

 

Dumps Moneyack Guarantee - PSE-PrismaCloud Dumps Approved Dumps: https://www.fast2test.com/PSE-PrismaCloud-premium-file.html

Verified PSE-PrismaCloud Exam Dumps PDF [2021] Access using Fast2test: https://drive.google.com/open?id=1mRK5Uov3u09UJbEsnjyjdEQx0JKRMhi8