PSE-PRISMACLOUD Online Practice Questions and Answers

Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

A. compliance where

B. network where

C. user where

D. config where

E. event where

Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

A. RQL queries

B. alert rules

C. notification templates

D. policies

Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

A. iLB-as-next-hop

B. transit gateway and security VPC with VM-Series

C. traditional active/standby HA on VM-Series

D. transit VPC and security VPC with VM-Series

How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

A. purchase a new PAYG license from a reseller

B. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license

C. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks

D. launch a new VM using the PAYG image

In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

A. fully instrumented API

B. Aperture Orchestration Engine

C. VM Orchestration Policy Editor

D. support for Dynamic Address Groups

What is a permanent public IP called on Amazon Web Services?

A. Reserved IP

B. PIP

C. EIP

D. Floating IP

Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

A. Shield

B. Inspector

C. GuardDuty

D. Amazon Web Services WAF

Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

A. AWS CDN

B. AWS NAT Gateway

C. AWS ALB

D. AWS NLB

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.

What must be configured on the firewall to avoid asymmetric routing?

A. source address translation

B. destination address translation

C. port address translation

D. source and destination address translation

Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

A. Palo Alto Networks provides full support if a valid support license is in place.

B. Support for the templates is available through Professional Services from Palo Alto Networks.

C. Unless otherwise noted, these templates are released under an as-is. best effort support policy.

D. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.