PSE-Prisma-Pro-24 Exam dumps PDF | Exam-Dumps.net (Page: 2)

QUESTION: 9

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

source address translation
destination address translation
port address translation
source and destination address translation

Answer(s): A

Reveal Solution Next Question

QUESTION: 10

Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance? (Choose two.)

UUID
new Auth Code
CPU ID
API Key

Answer(s): B,D

Explanation:

In a public cloud deployment, if your firewall is licensed with the BYOL option, you must Deactivate VM before you change the instance type or VM type and apply the license again on the firewall after you complete the model or instance upgrade.
When you change the instance type, because the firewall has a new UUID and CPU ID, the existing license will no longer be valid. https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series- firewall/upgrade-the-vm-series-firewall/upgrade-the-vm-series-model

Reveal Solution Next Question

QUESTION: 11

can you create a custom compliance standard in Prisma Public Cloud?

Generate a new Compliance Report.
Create compliance framework in a spreadsheet then import into Prisma Public Cloud.
From Compliance tab, clone a default framework and customize.
From Compliance tab > Compliance Standards, click "Add New."

Answer(s): D

Explanation:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud- compliance/create-a-custom-compliance-standard

Reveal Solution Next Question

QUESTION: 12

Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

compliance where
network where
user where
config where
event where

Answer(s): B,D,E

Reveal Solution Next Question

QUESTION: 13

Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

RQL queries
alert rules
notification templates
policies

Answer(s): D

Reveal Solution Next Question

QUESTION: 14

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Both Source and Destination Checks are disabled
Both Source and Destination Checks are enabled
Source Check is disabled and Destination Check is enabled
Source Check is enabled and Destination Check is disabled

Answer(s): A

Explanation:

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series- firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Reveal Solution Next Question

QUESTION: 15

In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

fully instrumented API
Aperture Orchestration Engine
VM Orchestration Policy Editor
support for Dynamic Address Groups

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 16

Which change represents a VM-Series NGFW license transfer?

VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services
VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services
VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure
VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

Answer(s): C

Reveal Solution Next Question

Palo Alto Networks PSE-Prisma-Pro-24 Exam (page: 2) Palo Alto Networks System Engineer - Prisma Cloud Professional Updated on: 29-Mar-2026

QUESTION: 9

QUESTION: 10

Explanation:

QUESTION: 11

Explanation:

QUESTION: 12

QUESTION: 13

QUESTION: 14

Explanation:

QUESTION: 15

QUESTION: 16

Palo Alto Networks PSE-Prisma-Pro-24 Exam (page: 2)
Palo Alto Networks System Engineer - Prisma Cloud Professional
Updated on: 29-Mar-2026