Palo Alto Networks PSE-PrismaCloud Exam Practice Test Instant Access

Question 1

Which cloud provider supports iLB-as-next-hop?

AMicrosoft Azure

BAlibaba Cloud

COracle Cloud

DAmazon Web Services

Answer : A

Question 2

Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

Anetwork where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

Bnetwork where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

Cshow traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

Dnetwork where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples
All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
network where dest.publicnetwork IN ( 'Internet IPs', 'Suspicious IPs' ) AND bytes > 1000000000

Answer : B

Question 3

The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.

Which component handles address translation?

AThe server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

BThe server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

CThe server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

DThe servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

Answer : C

Question 4

A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

ACustom threat signature

BZone Protection Profile

CQoS Profile to limit incoming requests

DDoS Protection Profile with specific session counts

Answer : D

Question 5

Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

AShield

BInspector

CGuardDuty

DAmazon Web Services WAF

Answer : B

Question 6

In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

Afully instrumented API

BAperture Orchestration Engine

CVM Orchestration Policy Editor

Dsupport for Dynamic Address Groups

Answer : A, D

Question 7

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

ABoth Source and Destination Checks are disabled

BBoth Source and Destination Checks are enabled

CSource Check is disabled and Destination Check is enabled

DSource Check is enabled and Destination Check is disabled
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Answer : A

Palo Alto Networks PSE-PrismaCloud Palo Alto Networks System Engineer - Prisma Cloud Exam Practice Test