Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 1:

  A prospective customer plans to migrate multiple applications to Amazon Web Services (AWS) and is considering deploying Palo Alto Networks NGFWs to protect these workloads from threats. The customer currently uses Panorama to manage on-premises firewalls and wants to avoid additional management complexity.

  Which AWS deployment option meets the customer's technical and business value requirements while minimizing risk exposure?

  A. Software NGFW credits and Strata Cloud Manager (SCM)
  B. Cloud NGFWs and Panorama
  C. Cloud NGFWs and Strata Cloud Manager (SCM)
  D. Software NGFW credits and Panorama
  B. Cloud NGFWs and Panorama

• Question 2:

  Which statement describes a benefit of using automation tools like Ansible, Terraform, or pan-os-python to manage PAN-OS firewalls and Panorama?

  A. It will automatically optimize PAN-OS device performance without requiring any input from the administrator.
  B. It will completely replace the PAN-OS web interface for all management tasks.
  C. It eliminates the need to understand PAN-OS configuration concepts and best practices.
  D. It maintains consistency and reduces the risk of human error when managing multiple PAN-OS devices.
  D. It maintains consistency and reduces the risk of human error when managing multiple PAN-OS devices.

• Question 3:

  What are three benefits of Palo Alto Networks VM-Series firewalls as they relate to direct integration with third-party network virtualization solution providers? (Choose three.)

  A. Integration with Cisco ACI allows insertion of a virtual firewall and enforcement of dynamic policies between endpoint groups without the need for manual policy adjustments.
  B. Integration with a third-party network virtualization solution allows management and deployment of the entire virtual network and hosts directly from Panorama.
  C. Integration with Nutanix AHV allows the firewall to be dynamically informed of changes in the environment and ensures policy is applied to virtual machines (VMs) as they join the network.
  D. Integration with VMware NSX provides comprehensive visibility and security of all virtualized data center traffic including intra-host ESXi virtual machine (VM) communications.
  E. Integration with network virtualization solution providers allows manual deployment and management of firewall rules through multiple interfaces and front ends specific to each technology.
  A. Integration with Cisco ACI allows insertion of a virtual firewall and enforcement of dynamic policies between endpoint groups without the need for manual policy adjustments.
  C. Integration with Nutanix AHV allows the firewall to be dynamically informed of changes in the environment and ensures policy is applied to virtual machines (VMs) as they join the network.
  D. Integration with VMware NSX provides comprehensive visibility and security of all virtualized data center traffic including intra-host ESXi virtual machine (VM) communications.

• Question 4:

  Which two presales methods will help secure the technical win of software firewalls? (Choose two.)

  A. PA-Series security lifecycle review (SLR) report
  B. Proof of Value (POV) product evaluations
  C. Network Security Design workshops
  D. Link to PAYG Cloud NGFW in the Azure Marketplace
  B. Proof of Value (POV) product evaluations
  C. Network Security Design workshops

• Question 5:

  What are three components of Cloud NGFW for AWS? (Choose three.)

  A. Cloud NGFW Resource
  B. Local or Global Rulestacks
  C. Cloud NGFW Inspector
  D. Amazon S3 bucket
  E. Cloud NGFW Tenant
  A. Cloud NGFW Resource
  B. Local or Global Rulestacks
  C. Cloud NGFW Inspector

• Question 6:

  When registering a software NGFW to the deployment profile without internet access (i.e., offline registration), what information must be provided in the customer support portal?

  A. Authcode and serial number of the VM-Series firewall
  B. Hypervisor installation ID and software version
  C. Number of data plane and management plane interfaces
  D. CPUID and UUID of the VM-Series firewall
  A. Authcode and serial number of the VM-Series firewall

• Question 7:

  Which three tools are available to customers to facilitate the simplified and/or best- practice configuration of Palo Alto Networks Next-Generation Firewalls (NGFWs)? (Choose three.)

  A. Policy Optimizer to help identify and recommend Layer 7 policy changes
  B. Telemetry to ensure that Palo Alto Networks has full visibility into the firewall configuration
  C. Expedition to enable the creation of custom threat signatures
  D. Day 1 Configuration through the customer support portal (CSP)
  E. Best Practice Assessment (BPA) in Strata Cloud Manager (SCM)
  A. Policy Optimizer to help identify and recommend Layer 7 policy changes
  D. Day 1 Configuration through the customer support portal (CSP)
  E. Best Practice Assessment (BPA) in Strata Cloud Manager (SCM)

• Question 8:

  Which three presales methods will help secure the technical win of software firewalls? (Choose three.)

  A. Provide link to PAYG Cloud NGFW in the Azure Marketplace
  B. Unsolicited proposals that disregard customer needs
  C. Network Security Design workshops
  D. Proof of Value (POV) product evaluations
  A. Provide link to PAYG Cloud NGFW in the Azure Marketplace
  C. Network Security Design workshops
  D. Proof of Value (POV) product evaluations

• Question 9:

  A Cloud NGFW for Azure can be deployed to which two environments? (Choose two.)

  A. Azure Kubernetes Service (AKS)
  B. Azure Virtual WAN
  C. Azure DevOps
  D. Azure VNET
  B. Azure Virtual WAN
  D. Azure VNET

• Question 10:

  A company needs a repeatable process to streamline the deployment of new VM-Series firewalls on its network by using the complete bootstrap method. Which file is used in the bootstrap package to configure the management interface of the firewall?

  A. init-mgmt-cfg.txt
  B. init-cfg.txt
  C. init-cfg.bat
  D. bootstrap.bat
  B. init-cfg.txt