Palo Alto Networks PSE-PrismaCloud 問題集

質問 1：
How can a range of dates in the Prisma Cloud default policy be modified?
A. Override the value and commit the configuration.
B. Manually create the Resource Query Language (RQL) statement.
C. Clone the existing policy and change the value.
D. Click the gear icon next to the policy name to open the "Edit Policy" dialog.
正解：C

質問 2：
Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.


正解：

Explanation:
longest, shortest, path, lowest multi, lowest peer

質問 3：
Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)
A. iLB-as-next-hop
B. traditional active/standby HA on VM-Series
C. transit gateway and security VPC with VM-Series
D. transit VPC and security VPC with VM-Series
正解：B,C

質問 4：
Which statement applies to optimization of registry scans with version pattern matching?
A. It is only necessary in registries with tens of thousands of repositories and millions of images.
B. It requires Linux images to rely on optimizing registry scans due to various Linux elements.
C. It is rarely successful in the Windows Operating System (OS).
D. It is best practice to always optimize registry scans for faster results.
正解：A

質問 5：
Which statement reflects the default vulnerability management policy?
A. Policy rule order has little impact on optimization.
B. The default vulnerability policy rule has an alert threshold to critical.
C. Prisma Cloud scans images in all containers immediately upon policy activation.
D. Prisma Cloud ships all vulnerability policy with a default alert for containers, hosts, and serverless functions.
正解：D

質問 6：
Which type of Prisma Cloud Enterprise alert supports autoremediation?
A. audit
B. config
C. network
D. anomaly
正解：B

質問 7：
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform?
(Choose two.)
A. create a bootstrap file that includes the mgmt-interface-swap command
B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
C. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
D. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)
A. Security groups
B. CloudFront distributions
C. Elastic Compute Cloud (EC2) instances
D. Network Address Translation (NAT) gateways
正解：B,C

質問 9：
Which two statements are true about CloudFormation? (Choose two.)
A. CloudFormation is a declarative orchestration tool.
B. CloudFormation templates can be written in JSON or YAML
C. CloudFormation is a procedural configuration management tool.
D. CloudFormation templates can be used on both Amazon Web Services and Microsoft Azure
正解：A,B