あなたを合格させるPSE-Prisma Cloud Professional PSE-PrismaCloud試験問題集で2025年04月11日には115問あります [Q43-Q64]

あなたを合格させるPSE-Prisma Cloud Professional PSE-PrismaCloud試験問題集で2025年04月11日には115問あります

PSE-PrismaCloud無料試験学習ガイド！（更新された115問あります)

PSE-PrismaCloud認定試験は65の複数選択の質問で構成されており、候補者はテストを完了するために90分かかります。試験はコンピューターベースで、ピアソンヴェーを通じて配信されます。試験に合格するには、候補者は最低70％を獲得する必要があります。テストに合格すると、ソーシャルメディアプロファイルや履歴書で共有できるデジタルバッジが届きます。

Palo Alto Networks PSE-PrismaCloud試験は、システムエンジニアがクラウド環境を管理し、セキュリティを確保する専門知識を証明する絶好の機会です。この認定資格は、競争の激しい求人市場でプロフェッショナルが際立つことと、潜在的な雇用主に自分のスキルと知識を証明することを目的としています。受験者は、試験を受ける前に十分に準備することをお勧めします。

質問 # 43
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

A. tags
B. elastic ip address
C. security group
D. source/destination checking

正解：D

解説：
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de

質問 # 44
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

A. NAT appliance
B. Border Customer Network
C. Azure Stack Edge Router
D. Public IP for the VM-Series NGFW

正解：C

質問 # 45
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

A. VM-Series firewalls
B. Amazon Web Services WAF
C. Traps
D. Security Groups
E. Prisma SaaS

正解：A、D、E

質問 # 46
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

A. DoS Protection Profile with specific session counts
B. Custom threat signature
C. Zone Protection Profile
D. QoS Profile to limit incoming requests

正解：C

質問 # 47
Which pillar of the Prisma Cloud platform can secure outbound traffic, stop lateral attack movement, and block inbound threats?

A. Cloud Network Security
B. Cloud Workload Protection (CWP)
C. Cloud Identity Security
D. Cloud Code Security

正解：A

質問 # 48
Which cloud provider supports iLB-as-next-hop?

A. Microsoft Azure
B. Alibaba Cloud
C. Oracle Cloud
D. Amazon Web Services

正解：A

質問 # 49
Prevention against which type of attack is configurable in Web-Application and API Security (WAAS)?

A. shoulder surfing
B. distributed denial of service (DDoS)
C. credential stuffing
D. cross-site scripting (XSS)

正解：D

質問 # 50
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

A. tags
B. elastic ip address
C. security group
D. source/destination checking

正解：D

解説：
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws
/deploy-the-vm-series-firewall-on-aws/launch-the-vm-series-firewall-on-aws.html

質問 # 51
How can a range of dates in the Prisma Cloud default policy be modified?

A. Manually create the Resource Query Language (RQL) statement.
B. Clone the existing policy and change the value.
C. Override the value and commit the configuration.
D. Click the gear icon next to the policy name to open the "Edit Policy" dialog.

正解：B

質問 # 52
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

正解：

解説：

質問 # 53
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

A. event where
B. compliance where
C. config where
D. network where
E. user where

正解：A、B、D

質問 # 54
How can you create a custom compliance standard in Prisma Public Cloud?

A. From Compliance tab > Compliance Standards, click "Add New."
B. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
C. Generate a new Compliance Report.
D. From Compliance tab, clone a default framework and customize.

正解：A

解説：
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

質問 # 55
Match the query type with its corresponding search

正解：

解説：

Explanation:
network where,
event where,
config where

質問 # 56
Match the logging service with its cloud provider.

正解：

解説：

Explanation
AWS, Azure, GCP, Azure, AWS, GCP

質問 # 57
Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?

A. event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'
B. event where subject = 'user1'
C. event where crud = 'delete'
D. event where crud = 'delete' AND subject = 'user1'

正解：A

質問 # 58
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

A. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
B. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
C. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

正解：A

質問 # 59
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

A. fully instrumented API
B. Aperture Orchestration Engine
C. support for Dynamic Address Groups
D. VM Orchestration Policy Editor

正解：B、C

質問 # 60
Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

A. Microsoft Azure
B. Google Cloud Platform
C. Oracle Cloud
D. Amazon Web Services

正解：A、B

質問 # 61
Which three requirements are needed to register a PAYG VM-Series NGFW at the Palo Alto Networks Customer Support website? (Choose three.)

A. UUID
B. Serial Number
C. License Key
D. Auth Code
E. CPU ID

正解：B、D、E

質問 # 62
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

A. event where
B. config where
C. network where
D. user where
E. compliance where

正解：A、B、C

質問 # 63
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?