PSE Palo Alto Networks System Engineer Professional - Prisma Cloud

Question 1

The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

A. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

B. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

C. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

D. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

Correct Answer: D

Question 2

Which change represents a VM-Series NGFW license transfer?

A. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

B. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services

C. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

D. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services

Correct Answer: A

Question 3

Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

A. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = storageEncrypted is false

B. config from cloud.resource where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

C. event from cloud.audit_logs where api.name = 'aws-rds-describe-db-instances' AND json.rule = publiclyAccessible is true

D. config from cloud.resource where api.name = 'aws-ec2-describe-instances' AND json.rule = publiclyAccessible is true

Correct Answer: B

Question 4

Which statement applies to vulnerability management policies?

A. Rules are evaluated in an undefined order.

B. Host and serverless rules support blocking, whereas container rules do not.

C. Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.

D. Policies for containers, hosts, and serverless functions are not separate.

Correct Answer: C

Question 5

The following error is received when performing a manual twistcli scan on an image:

What is missing from the command?

A. registry path for image name

B. username

C. password

D. console address

Correct Answer: A

Question 6

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

A. source and destination address translation

B. port address translation

C. source address translation

D. destination address translation

Correct Answer: C

Palo Alto Networks PSE Palo Alto Networks System Engineer Professional - Prisma Cloud - PSE-PrismaCloud Exam Practice Test

Latest Update

Useful Links

Contact Us