検証済みPSE-PrismaCloud問題集と解答で2025年最新のPSE-PrismaCloudをダウンロード [Q17-Q38]

Share

検証済みPSE-PrismaCloud問題集と解答で2025年最新のPSE-PrismaCloudをダウンロード

更新された100%カバー率リアルPSE-PrismaCloud試験問題で100%合格保証付いてます


PSE-PrismaCloudの試験を受けるためには、クラウドセキュリティのコンセプトやテクノロジーについて深い理解が必要です。クラウドネイティブセキュリティ、コンテナセキュリティ、サーバーレスセキュリティをはじめとする、クラウドインフラストラクチャーやサービス(Amazon Web Services、Microsoft Azure、Google Cloud Platform)に関する経験も必要です。この試験は、Prisma Cloudアーキテクチャ、デプロイメントモデル、セキュリティポリシー、脅威検出、コンプライアンス管理などのさまざまなトピックをカバーしています。

 

質問 # 17
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

  • A. through Iron Skillets in the GitHub Repository
  • B. through Expedition in the Customer Success Portal
  • C. through Solution Templates in the Azure Marketplace
  • D. through ARM Templates in the GitHub Repository

正解:B、D


質問 # 18
Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

  • A. Prisma SaaS
  • B. VM-Series firewalls
  • C. Amazon Web Services WAF
  • D. Security Groups
  • E. Traps

正解:B、C、E


質問 # 19
Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

  • A. Suspicious file activity
  • B. Account hijacking attempts
  • C. Unusual user activity
  • D. Excessive login failures
  • E. Denial-of-service activity

正解:B、C、D

解説:
Explanation
Account hijacking attempts
-Detect potential account hijacking attempts discovered by identifying unusual login activities. These can happen if there are concurrent login attempts made in short duration from two different geographic locations, which is impossible time travel
, or login from a previously unknown browser, operating system, or location.
Excessive login failures
-Detect potential account hijacking attempts discovered by identifying brute force login attempts. Excessive login failure attempts are evaluated dynamically based on the models observed with continuous learning.
Unusual user activity
-Discover insider threat and an account compromise using advanced data science. The Prisma Cloud machine learning algorithm profiles a user's activities on the console, as well as the usage of access keys based on the location and the type of cloud resources.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-poli


質問 # 20
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

  • A. 0
  • B. 1
  • C. 2
  • D. 3

正解:D


質問 # 21
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

  • A. Configure an Inventory report from the "Alerts" tab
  • B. Write an RQL query from the "Investigate" tab.
  • C. Generate a compliance report from the Compliance dashboard
  • D. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.

正解:C、D


質問 # 22
Which statement applies to optimization of registry scans with version pattern matching?

  • A. It is best practice to always optimize registry scans for faster results.
  • B. It is rarely successful in the Windows Operating System (OS).
  • C. It is only necessary in registries with tens of thousands of repositories and millions of images.
  • D. It requires Linux images to rely on optimizing registry scans due to various Linux elements.

正解:C


質問 # 23
Which Amazon Web Services (AWS) service supplies information for Prisma Cloud "event where" Resource Query Language (RQL) queries?

  • A. GuardDuty
  • B. Inspector
  • C. CloudTrail Audit Logs
  • D. Activity Logs

正解:C


質問 # 24
can you create a custom compliance standard in Prisma Public Cloud?

  • A. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
  • B. Generate a new Compliance Report.
  • C. From Compliance tab > Compliance Standards, click "Add New."
  • D. From Compliance tab, clone a default framework and customize.

正解:C

解説:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create- a-custom-compliance-standard


質問 # 25
What is required for an EC2 instance to access the internet directly from an AWS VPC?

  • A. Transit Gateway
  • B. Customer Gateway
  • C. Virtual Private Gateway
  • D. Internet Gateway

正解:D


質問 # 26
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

  • A. event where
  • B. user where
  • C. compliance where
  • D. config where
  • E. network where

正解:A、D、E


質問 # 27
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

  • A. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
  • B. network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
  • C. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
  • D. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

正解:B

解説:
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples All network traffic that is greater than 1GB and destined to Internet or Suspicious IPs (allows you to identify data exfiltration attempt on any cloud environment).
networkwheredest.publicnetwork IN ('Internet IPs','Suspicious IPs') AND bytes > 1000000000


質問 # 28
What are two examples of Amazon Web Services logging services? (Choose two.)

  • A. CIoudTrail
  • B. CloudLog
  • C. CloudWatch
  • D. CloudEvent

正解:A、C


質問 # 29
Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

  • A. Elastic Compute Cloud (EC2) instances
  • B. CloudFront distributions
  • C. Security groups
  • D. Network Address Translation (NAT) gateways

正解:A、B


質問 # 30
Which two elements does Prisma Cloud monitor when analyzing for unusual user activity? (Choose two.)

  • A. browser
  • B. time
  • C. Operating System (OS)
  • D. location

正解:B、D


質問 # 31
An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

  • A. source/destination checking
  • B. tags
  • C. security group
  • D. elastic ip address

正解:A

解説:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/de


質問 # 32
An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock- shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.
What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

  • A. The image will pass the CI policy, but will be blocked by the deployed policy; therefore, it will not be deployed.
  • B. The image will be deployed successfully, but no vulnerabilities will be reported.
  • C. The CI policy will fail the build; therefore, the image will not be deployed.
  • D. The image will be deployed successfully, and all vulnerabilities will be reported.

正解:C


質問 # 33
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

正解:

解説:

Explanation
longest, shortest, path, lowest multi, lowest peer


質問 # 34
Which two cloud providers provide egress load balancing? (Choose two.)

  • A. Oracle Cloud
  • B. Alibaba Cloud
  • C. Amazon Web Services
  • D. Microsoft Azure

正解:C、D


質問 # 35
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

  • A. Border Customer Network
  • B. NAT appliance
  • C. Azure Stack Edge Router
  • D. Public IP for the VM-Series NGFW

正解:C


質問 # 36
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

  • A. Bootstrapping
  • B. Azure Application Insight
  • C. Resource Group
  • D. Azure Security Center
  • E. ARM Template

正解:A、B、D


質問 # 37
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)

  • A. AWS CDN
  • B. AWS NLB
  • C. AWS ALB
  • D. AWS NAT Gateway

正解:A、C


質問 # 38
......

リアル問題集で100%無料PSE-PrismaCloud試験問題集を試そう:https://www.jpntest.com/shiken/PSE-PrismaCloud-mondaishu

実際のPSE-PrismaCloud問題集最新練習テスト問題集:https://drive.google.com/open?id=1Ji1y8IbwXV5XL87O8mCErtL9IvCreRuK

弊社を連絡する

我々は12時間以内ですべてのお問い合わせを答えます。

オンラインサポート時間:( UTC+9 ) 9:00-24:00
月曜日から土曜日まで

サポート:現在連絡