Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 11:

  Which two public cloud service provider (CSP) environments offer, through their marketplace, a Cloud NGFW under the CSP's own brand name? (Choose two.)

  A. Oracle Cloud Infrastructure (OCI)
  B. IBM Cloud (previously Softlayer)
  C. Alibaba Cloud
  D. Google Cloud Platform (GCP)
  A. Oracle Cloud Infrastructure (OCI)
  D. Google Cloud Platform (GCP)

• Question 12:

  What are three Palo Alto Networks VM-Series firewall reference architecture deployment models? (Choose three.)

  A. Cloud NGFW for AWS: Combined Model
  B. AWS VM-Series: Isolated Transit Gateway
  C. Cloud NGFW for Azure: Virtual WAN integration
  D. GCP VM-Series: VPC network peering model with Shared VPC
  E. Azure VM-Series: Distributed VCN - common firewall
  B. AWS VM-Series: Isolated Transit Gateway
  C. Cloud NGFW for Azure: Virtual WAN integration
  D. GCP VM-Series: VPC network peering model with Shared VPC

• Question 13:

  Which method fully automates the initial deployment, configuration, licensing, and threat content download when setting up a new VM-Series firewall?

  A. Register the VM-Series firewall and launch the Day 1 Configuration Wizard.
  B. Use Panorama to push device groups and template stack configurations to the new VM- Series firewall.
  C. Deploy a complete bootstrap package by using an ISO image, block storage, or a storage bucket.
  D. Connect the VM-Series firewall to Panorama and push the configuration package by using the bootstrap plugin.
  C. Deploy a complete bootstrap package by using an ISO image, block storage, or a storage bucket.

• Question 14:

  What is a benefit of credit-based flexible licensing for software firewalls?

  A. Permanently setting the capabilities of the software firewalls
  B. Adding Cloud-Delivered Security Services (CDSS) to CN-Series firewalls
  C. Adding subscriptions to PA-Series firewalls
  D. Creating Cloud NGFWs
  D. Creating Cloud NGFWs

• Question 15:

  What are two methods or tools to directly automate the deployment of VM-Series NGFWs into supported public clouds? (Choose two.)

  A. GitHub PaloAltoNetworks Terraform SWFW modules
  B. Deployment configuration in the public cloud Panorama plugins
  C. paloaltonetworks.panos Ansible collection
  D. panos Terraform provider
  A. GitHub PaloAltoNetworks Terraform SWFW modules
  D. panos Terraform provider

• Question 16:

  A customer is concerned about the administrative effort required to deploy over 200 VM- and CN-Series firewalls across multiple public and private clouds. The customer wants to integrate the deployment of these firewalls into the application-development process to ensure security at the speed of DevOps.

  Which deployment option meets the requirements?

  A. Push configurations to all firewalls by using Panorama
  B. Integration with automation and orchestration platforms
  C. Preconfigured Software Firewall Deployment Profiles
  D. Execution of Cloud NGFW bootstrapping
  B. Integration with automation and orchestration platforms

• Question 17:

  A company wants to make its flexible-license VM-Series firewall, which runs on ESXi, process higher throughput.

  Which order of steps should be followed to minimize downtime?

  A. 1. Increase the vCPU within the deployment profile. 2.Retrieve or fetch license keys on the VM-Series NGFW. 3.Confirm the correct tier level and vCPU appear on the NGFW dashboard. 4.Power-off the VM and increase the vCPUs within the hypervisor. 5.Power-on the VM-Series NGFW.
  B. 1. Power-off the VM and increase the vCPUs within the hypervisor. 2.Increase the vCPU within the deployment profile. 3.Retrieve or fetch license keys on the VM-Series NGFW. 4.Confirm the correct tier level and vCPU appear on the NGFW dashboard. 5.Power-on the VM-Series NGFW.
  C. 1. Increase the vCPU within the deployment profile. 2.Retrieve or fetch license keys on the VM-Series NGFW. 3.Power-off the VM and increase the vCPUs within the hypervisor. 4.Power-on the VM-Series NGFW. 5.Confirm the correct tier level and vCPU appear on the NGFW dashboard.
  D. 1. Power-off the VM and increase the vCPUs within the hypervisor. 2.Power-on the VM-Series NGFW. 3.Retrieve or fetch license keys on the VM-Series NGFW. 4.Increase the vCPU within the deployment profile. 5.Confirm the correct tier level and vCPU appear on the NGFW dashboard.
  B. 1. Power-off the VM and increase the vCPUs within the hypervisor. 2.Increase the vCPU within the deployment profile. 3.Retrieve or fetch license keys on the VM-Series NGFW. 4.Confirm the correct tier level and vCPU appear on the NGFW dashboard. 5.Power-on the VM-Series NGFW.

• Question 18:

  A partner has successfully showcased and validated the efficacy of the Palo Alto Networks software firewall to a customer.

  Which two additional partner-delivered or Palo Alto Networks-delivered common options can the sales team offer to the customer before the sale is completed? (Choose two.)

  A. Hardware collection and recycling services by Palo Alto Networks or by an approved NextWave Partner for the customer's existing firewall infrastructure
  B. Professional services delivered by Palo Alto Networks or by an approved Certified Professional Services Partner (CPSP) for deployment assistance or QuickStart
  C. Network encryption services (NES) delivered by an approved NES partner to ensure none of the data traversed is readable by third-party entities
  D. Managed services delivered by an approved Managed Security Services Program (MSSP) partner for day-to-day management of the environment
  B. Professional services delivered by Palo Alto Networks or by an approved Certified Professional Services Partner (CPSP) for deployment assistance or QuickStart
  D. Managed services delivered by an approved Managed Security Services Program (MSSP) partner for day-to-day management of the environment

• Question 19:

  A company has used software NGFW credits to deploy several VM-Series firewalls with Advanced URL Filtering in the company's deployment profiles. The IT department has determined that the firewalls no longer need the Advanced URL Filtering license.

  How can this license be removed from the hosts?

  A. Edit the current deployment profile to remove the Advanced URL Filtering license.
  B. On the firewall, issue this command: > delete url subscription license.
  C. Add a new deployment profile with all the licenses selected except Advanced URL Filtering.
  D. Delete the current deployment profile from the cloud service provider.
  A. Edit the current deployment profile to remove the Advanced URL Filtering license.

• Question 20:

  Which three statements describe common characteristics of Cloud NGFW and VM-Series offerings? (Choose three.)

  A. In Azure, both offerings can be integrated directly into Virtual WAN hubs.
  B. In Azure and AWS, both offerings can be managed by Panorama.
  C. In AWS, both offerings can be managed by AWS Firewall Manager.
  D. In Azure, inbound destination NAT configuration also requires source NAT to maintain flow symmetry.
  E. In Azure and AWS, internal (east-west) flows can be inspected without any NAT.
  B. In Azure and AWS, both offerings can be managed by Panorama.
  D. In Azure, inbound destination NAT configuration also requires source NAT to maintain flow symmetry.
  E. In Azure and AWS, internal (east-west) flows can be inspected without any NAT.