PSE-PRISMACLOUD Online Practice Questions and Answers

Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Select and Place:

A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

Select and Place:

How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as "Private?

A. Create an RQL config query to identify resources with the tag "Private."

B. Create an RQL network query to identify traffic from resources tagged "Private."

C. Open the Asset Dashboard, filter on tags: and choose "Private."

D. Generate a CIS compliance report and review the "Asset Summary."

Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

A. Azure Application Insight

B. Resource Group

C. Azure Security Center

D. Bootstrapping

E. ARM Template

Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)

A. Google Cloud Platform

B. Microsoft Azure

C. Oracle Cloud

D. Amazon Web Services

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

A. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

C. create a bootstrap file that includes the mgmt-interface-swap command

D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Which three services can Google Cloud Security Scanner assess? (Choose three.)

A. Google Kubernetes Engine

B. BigQuery

C. Compute Engine

D. App Engine

E. Google Virtual Private Cloud

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

A. Both Source and Destination Checks are disabled

B. Both Source and Destination Checks are enabled

C. Source Check is disabled and Destination Check is enabled

D. Source Check is enabled and Destination Check is disabled

Which RQL string returns a list of all Azure virtual machines that are not currently running?

A. config where api.name = 'azure-vm-list' AND json.rule = powerState = "off'

B. config where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"

C. config where api.name = 'azure-vm-list' AND json.rule = powerState = "running"

D. config where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"

Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

A. platform as a service

B. infrastructure as a service

C. software as code

D. infrastructure as code