Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 41:

  Which two statements describe the functionality of the VM-Series firewall plugin? (Choose two.)

  A. The installed VM-Series firewall plugin on the VM-Series firewall can only be upgraded or deleted.
  B. The Panorama plugin must be installed on the VM-Series firewall to enable communication with Panorama.
  C. To use Panorama to configure public cloud VM-Series firewall integrations, the VM- Series firewall plugin must be installed on Panorama.
  D. The VM-Series firewall plugin on Panorama is not built in and must be installed to enable communication and manage the environment.
  C. To use Panorama to configure public cloud VM-Series firewall integrations, the VM- Series firewall plugin must be installed on Panorama.
  D. The VM-Series firewall plugin on Panorama is not built in and must be installed to enable communication and manage the environment.

• Question 42:

  Which three capabilities and characteristics are shared by the deployments of Cloud NGFW for Azure and VM-Series firewalls? (Choose three.)

  A. Panorama management
  B. Inter-VNet inspection through Virtual WAN hub
  C. Transparent inspection of private-to-private east-west traffic that preserves client source IP address
  D. Inter-VNet inspection through a transit VNet
  E. Use of routing intent policies to apply security policies
  A. Panorama management
  C. Transparent inspection of private-to-private east-west traffic that preserves client source IP address
  D. Inter-VNet inspection through a transit VNet

• Question 43:

  Which three tools or methods automate VM-Series firewall deployment? (Choose three.)

  A. Bootstrap the VM-Series firewall
  B. Palo Alto Networks GitHub repository
  C. Panorama Software Library image
  D. Panorama Software Firewall License plugin
  E. Shared Disk Software Library folder
  A. Bootstrap the VM-Series firewall
  B. Palo Alto Networks GitHub repository
  D. Panorama Software Firewall License plugin

• Question 44:

  What is an advantage of using advanced versions of Cloud-Delivered Security Services (CDSS) subscriptions compared to legacy versions of CDSS?

  A. Threats are detected with inline cloud-scale machine learning (ML).
  B. New threat-related signature databases can be downloaded and installed in real time.
  C. External dynamic lists block known malicious threat sources and destinations.
  D. Firewall throughput is improved by inspecting hashes of advanced packet headers.
  A. Threats are detected with inline cloud-scale machine learning (ML).

• Question 45:

  Why should a customer use advanced versions of Cloud-Delivered Security Services (CDSS) subscriptions compared to legacy versions when creating or editing a deployment profile? (e.g., using Advanced Threat Prevention instead of Threat Prevention.)

  A. To improve firewall throughput by inspecting hashes of advanced packet headers
  B. To download and install new threat-related signature databases in real-time
  C. To use cloud-scale machine learning inline for detection of highly evasive and zero-day threats
  D. To use external dynamic lists for blocking known malicious threat sources and destinations
  C. To use cloud-scale machine learning inline for detection of highly evasive and zero-day threats

• Question 46:

  A company has created a custom application that collects URLs from various websites and then lists bad sites. They want to update a custom URL category on the firewall with the URLs collected.

  Which tool can automate these updates?

  A. Dynamic User Groups
  B. SNMP SET
  C. Dynamic Address Groups
  D. XMLAPI
  D. XMLAPI

• Question 47:

  Which two deployment models does Cloud NGFW for AWS support? (Choose two.)

  A. Hierarchical
  B. Centralized
  C. Distributed
  D. Linear
  B. Centralized
  C. Distributed

• Question 48:

  What are two benefits of using Palo Alto Networks NGFWs in a public cloud service provider (CSP) environment? (Choose two.)

  A. Management of all network traffic in every CSP environment
  B. Consistent Security policies throughout the multi-cloud environment
  C. Deployable in any CSP environment
  D. Automated scaling
  B. Consistent Security policies throughout the multi-cloud environment
  D. Automated scaling

• Question 49:

  A customer with multiple virtual private clouds (VPCs) in Amazon Web Services (AWS) protected by the cloud-native firewall experiences a cloud breach. As a result, malware spreads quickly across the VPCs, infecting several workloads.

  Which minimum solution should be proposed to prevent similar incidents in the future?

  A. Purchase a software credit pool for flexible Cloud NGFW deployment across the VPCs.
  B. Deploy a single Cloud NGFW.
  C. Subscribe to Palo Alto Networks Advanced Threat Protection for the cloud-native firewall.
  D. Implement a Cloud NGFW for each VPC.
  D. Implement a Cloud NGFW for each VPC.

• Question 50:

  Which three resources are deployment options for Cloud NGFW for Azure or AWS? (Choose three.)

  A. Azure CLI or Azure Terraform Provider
  B. Azure Portal
  C. AWS Firewall Manager
  D. Panorama AWS and Azure plugins
  E. Palo Alto Networks Ansible playbooks
  A. Azure CLI or Azure Terraform Provider
  B. Azure Portal
  E. Palo Alto Networks Ansible playbooks