[2023年10月] 検証済み Palo Alto Networks PSE-PrismaCloud リアル豪華お試しセット試験問題集 PDF [Q37-Q54]

[2023年10月] 検証済みPalo Alto Networks PSE-PrismaCloudリアル豪華お試しセット試験問題集でPDF

PSE-PrismaCloud問題集PDF最新 [2023年最新] 究極の学習ガイド

質問 # 37
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?

A. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
B. purchase a new PAYG license from a reseller
C. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
D. launch a new VM using the PAYG image

正解：D

質問 # 38
Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

A. platform as a service
B. software as code
C. infrastructure as code
D. infrastructure as a service

正解：D

質問 # 39
Which Google Cloud Platform project shares its VPC networks with other projects?

A. Host project
B. Subscribing project
C. Admin project
D. Service project

正解：A

解説：
Explanation
Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google

質問 # 40
What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

A. through ARM Templates in the GitHub Repository
B. through Solution Templates in the Azure Marketplace
C. through Iron Skillets in the GitHub Repository
D. through Expedition in the Customer Success Portal

正解：A、D

質問 # 41
Which two statements are true about CloudFormation? (Choose two.)

A. CloudFormation is a procedural configuration management tool.
B. CloudFormation templates can be written in JSON or YAML
C. CloudFormation is a declarative orchestration tool.
D. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure

正解：B、D

質問 # 42
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)

A. CFT Template
B. VM Monitoring
C. XML API
D. External Dynamic List

正解：B、C

解説：
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/

質問 # 43
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

A. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
B. Write an RQL query from the "Investigate" tab.
C. Configure an Inventory report from the "Alerts" tab
D. Generate a compliance report from the Compliance dashboard

正解：A、B

質問 # 44
Match the logging service with its cloud provider.

正解：

解説：

Explanation
AWS, Azure, GCP, Azure, AWS, GCP

質問 # 45
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

A. user where
B. network where
C. config where
D. event where
E. compliance where

正解：B、D、E

質問 # 46
Which cloud provider supports iLB-as-next-hop?

A. Microsoft Azure
B. Amazon Web Services
C. Oracle Cloud
D. Alibaba Cloud

正解：B

質問 # 47
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?

正解：

解説：

Explanation
backup, register, deploy, activate, load

質問 # 48
Match the query type with its corresponding search

正解：

解説：

Explanation
network where,
event where,
config where

質問 # 49
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

A. ISO 27001
B. GDPR
C. Payment Card Industry 3.0
D. EU Data Protection Directive 95/46/EC

正解：B

質問 # 50
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

A. QoS Profile to limit incoming requests
B. Custom threat signature
C. Zone Protection Profile
D. DoS Protection Profile with specific session counts

正解：D

質問 # 51
How can you create a custom compliance standard in Prisma Public Cloud?

A. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
B. Generate a new Compliance Report.
C. From Compliance tab, clone a default framework and customize.
D. From Compliance tab > Compliance Standards, click "Add New."

正解：D

解説：
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

質問 # 52
A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have identified that the interfaces on the firewall are in the incorrect order Which PAN-OS CLI command resolves this issue?

A. set mgmt-interface settings swap yes
B. set system setting mgmt-interface-swap enable yes
C. set system setting mgmt-interface swap yes
D. set mgmt-interface swap yes

正解：B

質問 # 53
Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?