[2025年03月05日] 心強いPSE-PrismaCloudのPDF問題集はPSE-PrismaCloud問題 [Q24-Q40]

[2025年03月05日] 心強いPSE-PrismaCloudのPDF問題集はPSE-PrismaCloud問題

正真正銘のPSE-PrismaCloud問題集で無料PDF問題で合格させる

PSE-PrismaCloud 認定を取得することは、Prisma Cloud テクノロジーの実装と管理における候補者の熟練度を示すものであり、多くの組織がアプリケーションやデータをクラウドに移行するにつれて、ますます重要性が高まっています。また、この認定は、組織のサイバー脅威に対するリスク暴露を減らし、業界規制に準拠するための候補者の能力も検証します。

質問 # 24
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

A. Aperture Orchestration Engine
B. support for Dynamic Address Groups
C. VM Orchestration Policy Editor
D. fully instrumented API

正解：B、D

質問 # 25
What are three examples of outbound traffic flow? (Choose three.)

A. issue yum update command on an instance inside Amazon Web Services
B. issue apt-get install command on an instance inside Amazon Web Services
C. outgoing Prisma Public Cloud API calls
D. web server inside Amazon Web Services receiving web requests from internet
E. Microsoft Windows inside Azure requesting a security patch

正解：A、B、C

質問 # 26
Which two resources provide operational insight within the Prisma Cloud Asset Inventory? (Choose two.)

A. Cloud Storage buckets
B. Cortex Data Lake
C. Compute Engine instance
D. Prisma Access Gateways

正解：A、B

質問 # 27
Which Resource Query Language (RQL) query searches for all Relational Database Service (RDS) instances that have a public IP address?

A. Config from cloud.resource whrere api.name = „aws-rds-desribe-db-instances" and json.rule = publiclyAccessible is true
B. Config from cloud.resource whrere api.name = „aws-rds-desribe-db-instances" and json.rule = publicIpAddress exists
C. Config from cloud.resource whrere api.name = „aws-rds-desribe-db-instances" and json.rule = 0.0.0.0/0
D. Config from cloud.resource whrere api.name = „aws-rds-desribe-db-instances" and json.rule = publicIpAddress is true

正解：B

質問 # 28
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

A. QoS Profile to limit incoming requests
B. Zone Protection Profile
C. Custom threat signature
D. DoS Protection Profile with specific session counts

正解：D

質問 # 29
Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)

A. Oracle Cloud
B. IBM Cloud
C. DigitalOcean
D. Azure

正解：A、D

質問 # 30
The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

A. The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.
B. The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.
C. The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses
D. The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

正解：C

質問 # 31
A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?

A. Zone Protection Profile
B. QoS Profile to limit incoming requests
C. Custom threat signature
D. DoS Protection Profile with specific session counts

正解：A

質問 # 32
Which type of Resource Query Language (RQL) query is used to create a custom policy that looks for untagged resources?

A. alert
B. event
C. config
D. data

正解：C

質問 # 33
An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

A. port address translation
B. destination address translation
C. source address translation
D. source and destination address translation

正解：A

質問 # 34
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

正解：

解説：

質問 # 35
can you create a custom compliance standard in Prisma Public Cloud?

A. From Compliance tab > Compliance Standards, click "Add New."
B. From Compliance tab, clone a default framework and customize.
C. Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
D. Generate a new Compliance Report.

正解：A

解説：
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-compliance/create-a-c

質問 # 36
How can a range of dates in the Prisma Cloud default policy be modified?

A. Manually create the Resource Query Language (RQL) statement.
B. Click the gear icon next to the policy name to open the "Edit Policy" dialog.
C. Clone the existing policy and change the value.
D. Override the value and commit the configuration.

正解：C

質問 # 37
Which two statements are true about CloudFormation? (Choose two.)

A. CloudFormation templates can be written in JSON or YAML
B. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
C. CloudFormation is a declarative orchestration tool.
D. CloudFormation is a procedural configuration management tool.

正解：A、B

質問 # 38
Match the query type with its corresponding search