PSE-PrismaCloud事前に試験練習テストで使おう（最新115問題)
有効なPSE-PrismaCloud試験解答PDF一年無料更新
PSE-PrismaCloud認定試験は90分間で行われ、60問の選択肢問題から構成されています。試験は、クラウドセキュリティの基礎、Prisma Cloudアーキテクチャ、展開と設定、コンプライアンスとガバナンス、脅威検出と対応など、様々なトピックをカバーしています。また、クラウド環境を保護するためのベストプラクティスや、Prisma Cloudに関連する一般的な問題のトラブルシューティング能力も試験されます。
質問 # 61
Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)
- A. Compute Engine instance
- B. Prisma Access Gateways
- C. Cortex Data Lake
- D. Cloud Storage buckets
正解：C、D
質問 # 62
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Source Check is enabled and Destination Check is disabled
- B. Both Source and Destination Checks are disabled
- C. Both Source and Destination Checks are enabled
- D. Source Check is disabled and Destination Check is enabled
正解：B
解説：
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/us
質問 # 63
What are two valid image identifiers to designate trust? (Choose two.)
- A. registry
- B. trusted publisher
- C. repo
- D. base layer
正解：A、B
質問 # 64
What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?
- A. Source Check is enabled and Destination Check is disabled
- B. Both Source and Destination Checks are disabled
- C. Both Source and Destination Checks are enabled
- D. Source Check is disabled and Destination Check is enabled
正解：B
解説：
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws
/use-case-secure-the-ec2-instances-in-the-aws-cloud
質問 # 65
What is the default capacity license of a VM-Series NGFW being deployed from the Google Cloud Platform Marketplace?
- A. VM-GCP
- B. VM-500
- C. VM-100
- D. VM-300
正解：D
解説：
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google
質問 # 66
Which two templates are supported by Cloud Code Security scan service? (Choose two.)
- A. Azure Resource Manager (ARM)
- B. GitHub
- C. Hyper Text Markup Language (HTML)
- D. Terraform
正解：A、D
質問 # 67
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?
- A. port address translation
- B. source address translation
- C. destination address translation
- D. source and destination address translation
正解：B
質問 # 68
Match the logging service with its cloud provider.
正解：
解説：
Explanation
AWS, Azure, GCP, Azure, AWS, GCP
質問 # 69
How does a customer that has deployed a VM-Series NGFW on Microsoft Azure using a BYOL license change to a PAYG license structure?
- A. go to Palo Alto Networks Support website to change the BYOL license to a PAYG license
- B. purchase a new PAYG license for Microsoft Azure from Palo Alto Networks
- C. launch a new VM using the PAYG image
- D. purchase a new PAYG license from a reseller
正解：C
質問 # 70
Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)
- A. Alert
- B. Ignore
- C. Block
- D. Deny
正解：A、C
質問 # 71
A customer has deployed a VM-Series NGFW on Amazon Web Services using a PAYG license. What is the sequence required by the customer to switch to a BYOL license?
正解：
解説：
Explanation
backup, register, deploy, activate, load
質問 # 72
Which statement applies to optimization of registry scans with version pattern matching?
- A. It is rarely successful in the Windows Operating System (OS).
- B. It is best practice to always optimize registry scans for faster results.
- C. It requires Linux images to rely on optimizing registry scans due to various Linux elements.
- D. It is only necessary in registries with tens of thousands of repositories and millions of images.
正解：D
質問 # 73
When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)
- A. Group2 / SHA-1 / AES-128-CBC / IKE-V1
- B. Group14 / SHA-256 / AES-256-GCM / IKE-V1
- C. Group2 / SHA-1 / AES-128-CBC
- D. Group14 / SHA-256 / AES-256-CBC / IKE-V1
- E. Group2 / SHA-1 / AES-128-GCM / IKE-V1
正解：B、C、E
質問 # 74
What are the two options to dynamically register tags used by Dynamic Address Groups that are referenced in policy? (Choose two.)
- A. External Dynamic List
- B. XML API
- C. VM Monitoring
- D. CFT Template
正解：B、C
解説：
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/
質問 # 75
Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)
- A. new Auth Code
- B. CPU ID
- C. API Key
- D. UUID
正解：A、C
解説：
Explanation
In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade. When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-th
質問 # 76
Which cloud provider supports iLB-as-next-hop?
- A. Oracle Cloud
- B. Microsoft Azure
- C. Alibaba Cloud
- D. Amazon Web Services
正解：B
質問 # 77
What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?
- A. Thorough
- B. Low
- C. High
- D. Baseline
正解：C
質問 # 78
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
正解：
解説：
Explanation:
longest, shortest, path, lowest multi, lowest peer
質問 # 79
What is required for an EC2 instance to access the internet directly from an AWS VPC?
- A. Virtual Private Gateway
- B. Transit Gateway
- C. Customer Gateway
- D. Internet Gateway
正解：D
質問 # 80
A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)
- A. Configure an Inventory report from the "Alerts" tab
- B. Write an RQL query from the "Investigate" tab.
- C. Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.
- D. Generate a compliance report from the Compliance dashboard
正解：C、D
質問 # 81
Match the logging service with its cloud provider.
正解：
解説：
質問 # 82
......
PSE-PrismaCloud認定は、クラウドセキュリティに興味がある専門家にとって重要な資格です。この認定試験に合格することで、候補者はPrisma Cloudを使用したクラウドセキュリティソリューションの設計と実装に必要な知識とスキルを持っていることを証明できます。これにより、候補者はキャリアを進め、組織はクラウド環境を安全に保護するための支援を受けることができます。
PSE Palo Alto Networks System Engineer Professional - Prisma Cloud無料更新認定サンプル問題：https://www.jpntest.com/shiken/PSE-PrismaCloud-mondaishu
試験本場前にトレンドなPalo Alto Networks PSE-PrismaCloudのPDF問題集を試そう：https://drive.google.com/open?id=1CornCZe6BWEluU1gIiRQXybBtQUDEpl-