Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 31:

  Which three statements describe benefits of Palo Alto Networks Cloud-Delivered Security Services (CDSS) over other vendor solutions? (Choose three.)

  A. Individually targeted products provide better security than platform solutions.
  B. Multi-vendor best-of-breed products provide security coverage on a per-use-case basis.
  C. It requires no additional performance overhead when enabling additional features.
  D. It provides simplified management through fewer consoles for more effective security coverage.
  E. It significantly reduces the total cost of ownership for the customer.
  C. It requires no additional performance overhead when enabling additional features.
  D. It provides simplified management through fewer consoles for more effective security coverage.
  E. It significantly reduces the total cost of ownership for the customer.

• Question 32:

  Which statement correctly describes behavior when using Ansible to automate configuration changes on a PAN-OS firewall or in Panorama?

  A. Ansible can only be used to automate configuration changes on physical firewalls but not virtual firewalls.
  B. Ansible requires direct access to the firewall's CLI to make changes.
  C. Ansible uses the XML API to make configuration changes to PAN-OS.
  D. Ansible requires the use of Python to create playbooks.
  C. Ansible uses the XML API to make configuration changes to PAN-OS.

• Question 33:

  Why are VM-Series firewalls now grouped by four tiers?

  A. To obscure the supported hypervisor manufacturer into generic terms
  B. To simplify the portfolio and reduce the number of VM-Series models customers must choose from
  C. To define the maximum limits for key criteria based on allocated memory
  D. To define the priority level of support customers expect when opening a TAC case, from lowest tier 1 to highest tier 4
  B. To simplify the portfolio and reduce the number of VM-Series models customers must choose from

• Question 34:

  A systems engineer (SE) is informed by the primary contact at a bank of an unused balance of 15,000 software NGFW flexible credits the bank does not want to lose when they expire in 1.5 years. The SE is told that the bank's new risk and compliance officer is concerned that its operation is too permissive when allowing its servers to send traffic to SaaS vendors. Currently, its AWS and Azure VM-Series firewalls only use Advanced Threat Prevention.

  What should the SE recommend to address the customer's concerns?

  A. Activate Advanced WildFire within the software NGFW deployment profiles, starting with the largest vCPU models and working down to the smallest to protect their biggest workloads.
  B. Subscribe to DNS Security, Advanced URL Filtering, and Advanced WildFire across all software NGFW deployment profiles until all the credits are used.
  C. Verify conformance to standards and regulations, the risk of failure, and the criticality of each workload to be protected, then determine which deployment profile subscriptions address the needs.
  D. Activate Advanced WildFire within the software NGFW deployment profiles, starting with the smallest vCPU models and working up to the largest to provide coverage for more VPCs and VNets with their current credit balance.
  C. Verify conformance to standards and regulations, the risk of failure, and the criticality of each workload to be protected, then determine which deployment profile subscriptions address the needs.

• Question 35:

  Which three features are supported by CN-Series firewalls? (Choose three.)

  A. App-ID
  B. Decryption
  C. GlobalProtect
  D. Content-ID
  E. IPSec
  A. App-ID
  B. Decryption
  D. Content-ID

• Question 36:

  A prospective customer wants to deploy VM-Series firewalls in their on-premises data center, CN-Series firewalls in Azure, and Cloud NGFWs in Amazon Web Services (AWS). They also require centralized management.

  Which solution meets the requirements?

  A. NGFW Software credits and Strata Cloud Manager (SCM)
  B. Fixed VM-Series firewalls, Cloud NGFW credits, and Panorama
  C. NGFW Software credits, Cloud NGFW, and Strata Cloud Manager (SCM)
  D. NGFW Software credits and Panorama
  D. NGFW Software credits and Panorama

• Question 37:

  Which three Cloud NGFW management tasks are inherently performed by the service within AWS and Azure? (Choose three.)

  A. Horizontally scaling out to meet increased traffic demand
  B. Installing new content (applications and threats)
  C. Installing new PAN-OS software updates
  D. Blocking high-risk S2C threats in accordance with SOC2 compliance
  E. Decrypting high-risk SSL traffic
  A. Horizontally scaling out to meet increased traffic demand
  B. Installing new content (applications and threats)
  C. Installing new PAN-OS software updates

• Question 38:

  Which statement applies when identifying the appropriate Palo Alto Networks firewall platform for virtualized as well as cloud environments?

  A. VM-Series firewalls cannot be used to protect container environments.
  B. All NGFW platforms support API integration.
  C. Panorama is the only unified management console for all NGFWs.
  D. CN-Series firewalls are used to protect virtualized environments.
  B. All NGFW platforms support API integration.

• Question 39:

  Where are auth codes registered in the bootstrapping process?

  A. ESXi server manifest
  B. AutoConfig template
  C. Palo Alto Networks Support Portal
  D. Palo Alto Networks App Hub
  C. Palo Alto Networks Support Portal

• Question 40:

  Per reference architecture, which default PAN-OS configuration should be overridden to make VM-Series firewall deployments in the public cloud more secure?

  A. Intrazone-default rule action and logging
  B. Intrazone-default rule service
  C. Interzone-default rule action and logging
  D. Interzone-default rule service
  C. Interzone-default rule action and logging