Palo Alto Networks PSE-PrismaCloud試験情報と無料練習テスト問題で合格せよ
2025年最新のの問題PSE-PrismaCloud問題集で更新されたPalo Alto Networks試験問題集を試そう
質問 # 20
How does Prisma Cloud Enterprise autoremediate unwanted violations to public cloud infrastructure?
- A. It makes changes after a policy violation has been identified in monitoring.
- B. It locks all changes to public cloud infrastructure and stops any configuration changes without prior approval.
- C. It uses machine learning (ML) to identify unusual changes to infrastructure.
- D. It inspects the application program interface (API) call made to public cloud and blocks the change if a policy violation is found.
正解：A
質問 # 21
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?
- A. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
- B. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
- C. network where dest.resource IN (resource where role = 'Database'}
- D. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))
正解：B
質問 # 22
A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.
Which type of Resource Query Language (RQL) query would be used in this policy?
- A. network from
- B. audit from
- C. event from
- D. config from
正解：B
質問 # 23
Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?
- A. GuardDuty
- B. Shield
- C. Amazon Web Services WAF
- D. Inspector
正解：D
質問 # 24
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. create a bootstrap file that includes the mgmt-interface-swap command
- B. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- C. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
正解：A、D
解説：
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on- google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for- google-internal-load-balancing.html
質問 # 25
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Both Source and Destination Checks are disabled
- B. Source Check is enabled and Destination Check is disabled
- C. Source Check is disabled and Destination Check is enabled
- D. Both Source and Destination Checks are enabled
正解：A
解説：
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws
/use-case-secure-the-ec2-instances-in-the-aws-cloud
質問 # 26
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. destination address translation
- B. port address translation
- C. source and destination address translation
- D. source address translation
正解：D
質問 # 27
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
- A. create a bootstrap file that includes the mgmt-interface-swap command
- B. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
- C. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
- D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
正解：A、D
解説：
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
質問 # 28
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Both Source and Destination Checks are disabled
- B. Source Check is enabled and Destination Check is disabled
- C. Source Check is disabled and Destination Check is enabled
- D. Both Source and Destination Checks are enabled
正解：A
解説：
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us
質問 # 29
Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?
- A. The alert threshold always has precedence over, and can be greater than, the block threshold.
- B. The thresholds can be set to informational, low, medium, high, and critical.
- C. The block threshold must always be equal to or greater than the alert threshold.
- D. The block threshold always has precedence over, and can be less than, the alert threshold.
正解：C
質問 # 30
Which cloud provider supports iLB-as-next-hop?
- A. Amazon Web Services
- B. Microsoft Azure
- C. Oracle Cloud
- D. Alibaba Cloud
正解：B
質問 # 31
Match the logging service with its cloud provider.
正解：
解説：
Explanation:
AWS, Azure, GCP, Azure, AWS, GCP
質問 # 32
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- B. Configure an Inventory report from the "Alerts" tab
- C. Generate a compliance report from the Compliance dashboard
- D. Write an RQL query from the "Investigate" tab.
正解：A、D
質問 # 33
What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?
- A. Azure Stack Edge Router
- B. Border Customer Network
- C. Public IP for the VM-Series NGFW
- D. NAT appliance
正解：D
質問 # 34
Which two statements are true about CloudFormation? (Choose two.)
- A. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
- B. CloudFormation is a procedural configuration management tool.
- C. CloudFormation is a declarative orchestration tool.
- D. CloudFormation templates can be written in JSON or YAML
正解：A、D
質問 # 35
The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)
- A. Direct Connect
- B. ExpressRoute
- C. IPsecVPN
- D. Fast Connect
正解：B、C
解説：
Explanation
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
質問 # 36
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
- A. EU Data Protection Directive 95/46/EC
- B. ISO 27001
- C. Payment Card Industry 3.0
- D. GDPR
正解：A
質問 # 37
What is a permanent public IP called on Amazon Web Services?
- A. PIP
- B. EIP
- C. Floating IP
- D. Reserved IP
正解：B
質問 # 38
Which three types of security checks can Prisma Public Cloud perform? (Choose three.)
- A. network where
- B. compliance where
- C. event where
- D. user where
- E. config where
正解：A、B、C
質問 # 39
What are two benefits of Cloud Security Posture Management (CSPM) over other solutions? (Choose two.)
- A. native integration of network, endpoint, and cloud data to stop attacks
- B. elimination of blind spots
- C. guaranteed proof of concept (POC) extensions beyond 30 days
- D. proactive addressing of risks
正解：B、D
質問 # 40
Which two types of Resource Query Language (RQL) queries can be used to create policies? (Choose two.)
- A. event from
- B. system from
- C. network from
- D. hose from
正解：A、D
質問 # 41
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-100
- B. VM-GCP
- C. VM-300
- D. VM-500
正解：C
質問 # 42
Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?
- A. Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = is TERMINATED
- B. Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = status == TERMINATED
- C. Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = status contains TERMINATED
- D. Config from.cloud.resource where api.name = „gcloud-compute-instance-list" and json.rule = TERMINATED
正解：C
質問 # 43
......
最新のPSE-PrismaCloud試験問題集でPalo Alto Networks試験が合格できます：https://www.jpntest.com/shiken/PSE-PrismaCloud-mondaishu
合格できるPalo Alto Networks PSE-PrismaCloudのPDF問題集で最近更新された115問あります：https://drive.google.com/open?id=1Ji1y8IbwXV5XL87O8mCErtL9IvCreRuK