Free Access PaloAltoNetworks.PSE-PrismaCloud.v2022-08-08.q35 Practice Test (Page 4)

Question 11

What is the scope of the Amazon Web Services IAM Service?

A.zonal

B.VPC

C.global

D.regional

Question 12

The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW.
Which component handles address translation?

A.The server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates those addresses to publicly accessible IP addresses. The VM-Series NGFW has publicly accessible IP addresses.

B.The server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those addresses to publicly accessible IP addresses.

C.The servers and VM-Series NGFW have publicly accessible IP addresses for management purposes.

D.The server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud infrastructure translates those addresses to publicly accessible IP addresses

Question 13

Which RQL string searches for all EBS volumes that do not have a "DataClassification" tag?

A.config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*].key exists

B.config where api.name = ,aws-ec2-describe-volumes' AND json.rule = tags[*]key != DataClassification

C.config where api.name = 'aws-ec2-describe-volumes, AND json.rule = tags[*]key contains DataClassification

D.config where api.name = 'aws-ec2-describe-volumes' AND json.rule = tags[*].key = 1

Question 14

In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

A.fully instrumented API

B.VM Orchestration Policy Editor

C.support for Dynamic Address Groups

D.Aperture Orchestration Engine