Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 21:

  Which tool can be used to deploy a CN-Series firewall?

  A. GCP Automated Deployment Services
  B. Kubernetes
  C. Docker Swarm
  D. Terraform Automated Deployment Services
  B. Kubernetes

• Question 22:

  Which tool facilitates a customer's migration from existing legacy firewalls to Palo Alto Networks Next-Generation Firewalls (NGFWs)?

  A. Expedition
  B. Policy Optimizer
  C. AutoFocus
  D. IronSkillet
  A. Expedition

• Question 23:

  What are three valid methods that use firewall flex credits to activate VM-Series firewall licenses by specifying authcode? (Choose three.)

  A. /config/bootstrap.xml file of complete bootstrapping package
  B. /license/authcodes file of complete bootstrap package
  C. Panorama device group in Panorama SW Licensing Plugin
  D. authcodes= key value pair of Azure Vault configuration
  E. authcodes= key value pair of basic bootstrapping configuration
  A. /config/bootstrap.xml file of complete bootstrapping package
  B. /license/authcodes file of complete bootstrap package
  E. authcodes= key value pair of basic bootstrapping configuration

• Question 24:

  What can a firewall use to automatically update Security policies with new IP address information for a virtual machine (VM) when it has moved from host-A to host-B because host-A is down or undergoing periodic maintenance?

  A. Dynamic Address Groups
  B. Dynamic User Groups
  C. Dynamic Host Groups
  D. Dynamic IP Groups
  A. Dynamic Address Groups

• Question 25:

  What three benefits does flex licensing for VM-Series firewalls offer? (Choose three.)

  A. Licensing additional memory resources to increase session capacity
  B. Licensing Strata Cloud Manager, Panorama with Dedicated Log Collectors, and CDSS per deployment profile
  C. Using a pool of credits for both CN-Series firewall and VM-Series firewall deployment profiles
  D. Moving credits between public and private cloud VM-Series firewall deployments
  E. Vertically scaling the number of licensed cores in an existing fixed deployment profile
  C. Using a pool of credits for both CN-Series firewall and VM-Series firewall deployment profiles
  D. Moving credits between public and private cloud VM-Series firewall deployments
  E. Vertically scaling the number of licensed cores in an existing fixed deployment profile

• Question 26:

  A company that purchased software NGFW credits from Palo Alto Networks has made a decision on the number of virtual machines (VMs) and licenses they wish to deploy in AWS cloud. How are the VM licenses created?

  A. Access the AWS Marketplace and use the software NGFW credits to purchase the VMs.
  B. Access the Palo Alto Networks Application Hub and create a new VM profile.
  C. Access the Palo Alto Networks Customer Support Portal and request the creation of a new software NGFW serial number.
  D. Access the Palo Alto Networks Customer Support Portal and create a software NGFW credits deployment profile.
  D. Access the Palo Alto Networks Customer Support Portal and create a software NGFW credits deployment profile.

• Question 27:

  CN-Series firewalls offer threat protection for which three use cases? (Choose three.)

  A. Prevention of sensitive data exfiltration from Kubernetes environments
  B. All Kubernetes workloads in the public and private cloud
  C. Inbound, outbound, and east-west traffic between containers
  D. All workloads deployed on-premises or in the public cloud
  E. Enforcement of segmentation policies that prevent lateral movement of threats
  A. Prevention of sensitive data exfiltration from Kubernetes environments
  C. Inbound, outbound, and east-west traffic between containers
  E. Enforcement of segmentation policies that prevent lateral movement of threats

• Question 28:

  Which two features offer the ability to manage Cloud NGFW in Azure or AWS? (Choose two.)

  A. Azure Firewall Portal
  B. Palo Alto Networks Ansible playbooks
  C. Panorama
  D. AWS Firewall Manager
  B. Palo Alto Networks Ansible playbooks
  C. Panorama

• Question 29:

  Which capability, as described in the Securing Applications series of design guides for VM- Series firewalls, is common across Azure, GCP, and AWS?

  A. BGP dynamic routing to peer with cloud and on-premises routers
  B. GlobalProtect portal and gateway services
  C. Horizontal scalability through cloud-native load balancers
  D. Site-to-site VPN
  C. Horizontal scalability through cloud-native load balancers

• Question 30:

  What is an advantage of using a Palo Alto Networks Cloud NGFW compared to deploying a VM-Series firewall in the cloud?

  A. Cloud NGFW integrates natively into the AWS management console.
  B. The customer maintains complete control of the Cloud NGFW.
  C. Layer 2 network functionality can be customized on Cloud NGFW.
  D. Cloud NGFW can easily be deployed using NGFW Software Credits.
  A. Cloud NGFW integrates natively into the AWS management console.