PSE-PRISMACLOUD Online Practice Questions and Answers

Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Select and Place:

What are two ways to initially deploy a VM-Series NGFW in Microsoft Azure? (Choose two.)

A. through ARM Templates in the GitHub Repository

B. through Solution Templates in the Azure Marketplace

C. through Expedition in the Customer Success Portal

D. through Iron Skillets in the GitHub Repository

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

A. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

C. create a bootstrap file that includes the mgmt-interface-swap command

D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Which change represents a VM-Series NGFW license transfer?

A. VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services

B. VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services

C. VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

D. VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

A. Custom threat signature

B. Zone Protection Profile

C. QoS Profile to limit incoming requests

D. DoS Protection Profile with specific session counts

What are three examples of outbound traffic flow? (Choose three.)

A. issue yum update command on an instance inside Amazon Web Services

B. Microsoft Windows inside Azure requesting a security patch

C. web server inside Amazon Web Services receiving web requests from internet

D. issue apt-get install command on an instance inside Amazon Web Services

E. outgoing Prisma Public Cloud API calls

An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

A. security group

B. tags

C. elastic ip address

D. source/destination checking

What is required for an EC2 instance to access the internet directly from an AWS VPC?

A. Internet Gateway

B. Transit Gateway

C. Virtual Private Gateway

D. Customer Gateway

Which three anomaly policies are predefined in Prisma Public Cloud? (Choose three.)

A. Excessive login failures

B. Unusual user activity

C. Denial-of-service activity

D. Account hijacking attempts

E. Suspicious file activity

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.

What must be configured on the firewall to avoid asymmetric routing?

A. source address translation

B. destination address translation

C. port address translation

D. source and destination address translation