1. Home
  2. Paloalto Networks
  3. PSE-Prisma Cloud Professional
  4. PSE-PrismaCloud
  5. PSE Palo Alto Networks System Engineer Professional - Prisma Cloud Questions and Answers

Pass the Paloalto Networks PSE-Prisma Cloud Professional PSE-PrismaCloud Questions and answers with CertsForce

 Paloalto Networks Exams      Go to Exam Detail      Get Premium Access
Viewing page 2 out of 4 pages
Viewing questions 11-20 out of questions
Questions # 11:

Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

Options:
A.

Shield

B.

Inspector

C.

GuardDuty

D.

Amazon Web Services WAF

Expert Solution
Questions # 12:

What are two valid image identifiers to designate trust? (Choose two.)

Options:
A.

repo

B.

trusted publisher

C.

registry

D.

base layer

Expert Solution
Questions # 13:

Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Question # 13

Options:
A.

4

B.

5

C.

3

D.

1

Expert Solution
Questions # 14:

What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

Options:
A.

VM Monitoring

B.

External Dynamic List

C.

CFT Template

D.

XML API

Expert Solution
Questions # 15:

Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?

Options:
A.

credential stuffing

B.

cross-site scripting (XSS)

C.

shoulder surfing

D.

distributed denial of service (DDoS)

Expert Solution
Questions # 16:

What are two examples of Amazon Web Services logging services? (Choose two.)

Options:
A.

CloudLog

B.

CloudEvent

C.

CloudWatch

D.

CIoudTrail

Expert Solution
Questions # 17:

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

Options:
A.

config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

B.

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

C.

config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

D.

config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Expert Solution
Questions # 18:

What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

Options:
A.

through ARM Templates in the GitHub Repository

B.

through Solution Templates in the Azure Marketplace

C.

through Expedition in the Customer Success Portal

D.

through Iron Skillets in the GitHub Repository

Expert Solution
Questions # 19:

When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Options:
A.

Group2 / SHA-1 / AES-128-CBC / IKE-V1

B.

Group2 / SHA-1 / AES-128-GCM / IKE-V1

C.

Group14 / SHA-256 / AES-256-GCM / IKE-V1

D.

Group2 / SHA-1 / AES-128-CBC

E.

Group14 / SHA-256 / AES-256-CBC / IKE-V1

Expert Solution
Questions # 20:

The following error is received when performing a manual twistcli scan on an image:

Question # 20

What is missing from the command?

Options:
A.

registry path for image name

B.

password

C.

console address

D.

username

Expert Solution
Viewing page 2 out of 4 pages
Viewing questions 11-20 out of questions