Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 1:

  Which public cloud provider requires the creation of subnets that are dedicated to Cloud NGFW endpoints?

  A. Google Cloud Platform (GCP)
  B. Alibaba Cloud
  C. Amazon Web Services (AWS)
  D. Microsoft Azure
  C. Amazon Web Services (AWS)

• Question 2:

  Which statement describes a benefit of using automation tools like Ansible, Terraform, or pan-os-python to manage PAN-OS firewalls and Panorama?

  A. It will automatically optimize PAN-OS device performance without requiring any input from the administrator.
  B. It will completely replace the PAN-OS web interface for all management tasks.
  C. It eliminates the need to understand PAN-OS configuration concepts and best practices.
  D. It maintains consistency and reduces the risk of human error when managing multiple PAN-OS devices.
  D. It maintains consistency and reduces the risk of human error when managing multiple PAN-OS devices.

• Question 3:

  A Cloud NGFW for Azure can be deployed to which two environments? (Choose two.)

  A. Azure Kubernetes Service (AKS)
  B. Azure Virtual WAN
  C. Azure DevOps
  D. Azure VNET
  B. Azure Virtual WAN
  D. Azure VNET

• Question 4:

  What are three Palo Alto Networks VM-Series firewall reference architecture deployment models? (Choose three.)

  A. Cloud NGFW for AWS: Combined Model
  B. AWS VM-Series: Isolated Transit Gateway
  C. Cloud NGFW for Azure: Virtual WAN integration
  D. GCP VM-Series: VPC network peering model with Shared VPC
  E. Azure VM-Series: Distributed VCN - common firewall
  B. AWS VM-Series: Isolated Transit Gateway
  C. Cloud NGFW for Azure: Virtual WAN integration
  D. GCP VM-Series: VPC network peering model with Shared VPC

• Question 5:

  Which element protects and hides an internal network in an outbound flow?

  A. DNS sinkholing
  B. User-ID
  C. App-ID
  D. NAT
  D. NAT

• Question 6:

  Which statement is valid for both VM-Series firewalls and Cloud NGFWs?

  A. VM-Series firewalls and Cloud NGFWs can be deployed in a customer's private cloud.
  B. Panorama can manage VM-Series firewalls and Cloud NGFWs.
  C. Updates for VM-Series firewalls and Cloud NGFWs are performed by the customer.
  D. VM-Series firewalls and Cloud NGFWs can be deployed in all public cloud vendor environments.
  B. Panorama can manage VM-Series firewalls and Cloud NGFWs.

• Question 7:

  A company that purchased software NGFW credits from Palo Alto Networks has made a decision on the number of virtual machines (VMs) and licenses they wish to deploy in AWS cloud. How are the VM licenses created?

  A. Access the AWS Marketplace and use the software NGFW credits to purchase the VMs.
  B. Access the Palo Alto Networks Application Hub and create a new VM profile.
  C. Access the Palo Alto Networks Customer Support Portal and request the creation of a new software NGFW serial number.
  D. Access the Palo Alto Networks Customer Support Portal and create a software NGFW credits deployment profile.
  D. Access the Palo Alto Networks Customer Support Portal and create a software NGFW credits deployment profile.

• Question 8:

  A customer is concerned about the administrative effort required to deploy over 200 VM- and CN-Series firewalls across multiple public and private clouds. The customer wants to integrate the deployment of these firewalls into the application-development process to ensure security at the speed of DevOps.

  Which deployment option meets the requirements?

  A. Push configurations to all firewalls by using Panorama
  B. Integration with automation and orchestration platforms
  C. Preconfigured Software Firewall Deployment Profiles
  D. Execution of Cloud NGFW bootstrapping
  B. Integration with automation and orchestration platforms

• Question 9:

  Which two deployment models are supported by Cloud NGFW for AWS? (Choose two.)

  A. Hierarchical
  B. Distributed
  C. Linear
  D. Centralized
  B. Distributed
  D. Centralized

• Question 10:

  Which three statements describe functionality of NGFW inline placement for Layer 2/3 implementation? (Choose three.)

  A. VMs on VMware ESXi hypervisors can be segregated from one another on the network by the VM-Series NGFW by IP addressing and Layer 3 gateways.
  B. VMs on VMware ESXi hypervisors can be segregated from each other by the VM-Series NGFW using VLAN tags while preserving existing Layer 3 gateways.
  C. VM-Series next-generation firewalls cannot be positioned between the physical datacenter network and guest VM workloads.
  D. VM-Series next-generation firewalls do not support VMware vMotion or guest VM workloads.
  E. A next-generation firewall VLAN interface can function as a Layer 3 interface.
  A. VMs on VMware ESXi hypervisors can be segregated from one another on the network by the VM-Series NGFW by IP addressing and Layer 3 gateways.
  B. VMs on VMware ESXi hypervisors can be segregated from each other by the VM-Series NGFW using VLAN tags while preserving existing Layer 3 gateways.
  E. A next-generation firewall VLAN interface can function as a Layer 3 interface.