Ask Question
Palo Alto Networks PSE-PrismaCloud Practice Test - Questions Answers, Page 2
Add to Whishlist
List of questions
Question 11
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)
Excessive login failures
Unusual user activity
Denial-of-service activity
Account hijacking attempts
Suspicious file activity
Account hijacking attempts
---Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is
impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
---Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
---Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html
Question 12
Which two data sources are ingested by Prisma Cloud? (Choose two.)
network flow logs
list of all database instances' tables
metadata about compute resources' configuration
Cortex Data Lake
Question 13
Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?
Cloud Workload Protection (CWP)
Cloud Code Security
Cloud Network Security
Cloud Identity Security
Question 14
Which statement applies to vulnerability management policies?
Host and serverless rules support blocking, whereas container rules do not.
Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.
Policies for containers, hosts, and serverless functions are not separate.
Rules are evaluated in an undefined order.
Question 15
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?
security group
tags
elastic ip address
source/destination checking
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/deploy-the-vm-series-firewall-on-aws/launch-the-vm-series-firewall-on-aws.html
Question 16
Which Google Cloud Platform project shares its VPC networks with other projects?
Service project
Host project
Admin project
Subscribing project
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/autoscaling-on-google-cloud-platform/deploy-autoscaling-on-google-cloud.html
Question 17
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
source address translation
destination address translation
port address translation
source and destination address translation
Question 18
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance? (Choose two.)
UUID
new Auth Code
CPU ID
API Key
In a public cloud deployment, if your firewall is licensed with the BYOL option, you mustDeactivate VMbefore you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-the-vm-series-firewall/upgrade-the-vm-series-model
Question 19
can you create a custom compliance standard in Prisma Public Cloud?
Generate a new Compliance Report.
Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
From Compliance tab, clone a default framework and customize.
From Compliance tab > Compliance Standards, click 'Add New.'
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-custom-compliance-standard
Question 20
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
compliance where
network where
user where
config where
event where
Export
If you didn't receive an email within 5 minutes, you should submit a support request to [email protected].
|
BASIC - 1 Month
$
3
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
PLUS - 2 Months
$
10
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
PRO - 6 Months
$
20
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Selling illegal goods, money scams etc.
Serious attack on a group.
Harassing an individual (including doxing)
Threatening or glorifying violence or serious harm, including self-harm
Nudity/Sexual content
Sexually explicit or suggestive imagery or writing involving minors
Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans
Reusing content without attribution (link and blockquotes)
Not in English or has very bad formatting, grammar, and spelling
Author's credential is offensive, spam, or impersonation
Ex. Illegal content, incomplete question...
Practice Tests
Vendor:
Exam Questions:
Learners
Last Updated
Language
Question