Palo Alto Networks PSE PrismaCloud PSE Palo Alto Networks System Engineer Professional – Prisma Cloud Online Training
Palo Alto Networks PSE PrismaCloud Online Training
The questions for PSE PrismaCloud were last updated at Nov 22,2024.
- Exam Code: PSE PrismaCloud
- Exam Name: PSE Palo Alto Networks System Engineer Professional - Prisma Cloud
- Certification Provider: Palo Alto Networks
- Latest update: Nov 22,2024
What are two examples of Amazon Web Services logging services? (Choose two.)
- A . CloudLog
- B . CloudEvent
- C . CloudWatch
- D . CIoudTrail
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A . Both Source and Destination Checks are disabled
- B . Both Source and Destination Checks are enabled
- C . Source Check is disabled and Destination Check is enabled
- D . Source Check is enabled and Destination Check is disabled
A
Explanation:
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud
How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?
- A . Create an RQL config query to identify resources with the tag "Private."
- B . Create an RQL network query to identify traffic from resources tagged "Private."
- C . Open the Asset Dashboard, filter on tags: and choose "Private."
- D . Generate a CIS compliance report and review the "Asset Summary."
Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)
- A . Google Cloud Platform
- B . Microsoft Azure
- C . Oracle Cloud
- D . Amazon Web Services
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)
- A . run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- B . run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- C . create a bootstrap file that includes the mgmt-interface-swap command
- D . in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
C,D
Explanation:
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for-google-internal-load-balancing.html
any new dumps
#15 is incorrect, you can only use CLI command after VM is operational.
#13 is incorrect, RQL queries for EC2 instances is config from cloud.resource where
#7 is better using a Zone Protection profile as DoS protection requires a match on IP, Internet too much to track, only way for DoS is to NAT to server IP. Zone Protection better option.