Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 61:

  Tags can be created for which three objects? (Choose three.)

  A. Address groups
  B. Dynamic NAT objects
  C. External dynamic lists
  D. Address objects
  E. Service groups
  A. Address groups
  D. Address objects
  E. Service groups

• Question 62:

  Which two statements accurately describe cloud-native load balancing with Palo Alto Networks VM-Series firewalls and/or Cloud NGFW in public cloud environments? (Choose two.)

  A. Cloud NGFW's distributed architecture model requires deployment of a single centralized firewall and will force all traffic to the firewall across pre-built VPN tunnels.
  B. VM-Series firewall deployments in the public cloud will require the deployment of a cloud-native load balancer if high availability (HA) or redundancy is needed.
  C. Cloud NGFW in AWS or Azure has load balancing built into the underlying solution and does not require the deployment of a separate load balancer.
  D. VM-Series firewall load balancing is automated and is handled by the internal mechanics of the NGFW software without the need for a load balancer.
  B. VM-Series firewall deployments in the public cloud will require the deployment of a cloud-native load balancer if high availability (HA) or redundancy is needed.
  C. Cloud NGFW in AWS or Azure has load balancing built into the underlying solution and does not require the deployment of a separate load balancer.

• Question 63:

  What are two benefits of using a Palo Alto Networks NGFW in a public cloud environment? (Choose two.)

  A. Complete security solution for the public cloud provider's physical host regardless of security measures
  B. Automatic scaling of NGFWs to meet the security needs of growing applications and public cloud environments
  C. Ability to manage the public cloud provider's physical hosts
  D. Consistent Security policy to inbound, outbound, and east-west network traffic throughout the multi-cloud environment
  B. Automatic scaling of NGFWs to meet the security needs of growing applications and public cloud environments
  D. Consistent Security policy to inbound, outbound, and east-west network traffic throughout the multi-cloud environment

• Question 64:

  What is required to manage a VM-Series firewall with Panorama?

  A. VPN connection from the firewall to Panorama
  B. VM-Series REST API script
  C. VM-Series firewall plugin
  D. Panorama template
  C. VM-Series firewall plugin

• Question 65:

  Which use case is valid for Strata Cloud Manager (SCM)?

  A. Supporting pre PAN-OS 10.1 SD-WAN migrations to SCM
  B. Provisioning and licensing new CN-Series firewall deployments
  C. Providing AI-Powered ADEM for all Prisma Access users
  D. Providing API-driven plugin framework for integration with third-party ecosystems
  B. Provisioning and licensing new CN-Series firewall deployments

• Question 66:

  What are two characteristics of firewall flex credit profiles of a credit pool in the Palo Alto Networks Customer Support Portal? (Choose two.)

  A. Each VM-Series firewall deployment profile can be either fixed or flexible until defined and saved.
  B. All firewalls activated to a deployment profile will have the same subscriptions.
  C. The number of licensed cores must match the number of provisioned CPU cores per instance.
  D. Allocate credits for use with Cloud NGFW for AWS and Azure.
  A. Each VM-Series firewall deployment profile can be either fixed or flexible until defined and saved.
  D. Allocate credits for use with Cloud NGFW for AWS and Azure.

• Question 67:

  Which public cloud provider requires the creation of subnets that are dedicated to Cloud NGFW endpoints?

  A. Google Cloud Platform (GCP)
  B. Alibaba Cloud
  C. Amazon Web Services (AWS)
  D. Microsoft Azure
  C. Amazon Web Services (AWS)

• Question 68:

  Which two capabilities are shared by the deployments of Cloud NGFW for Azure and VM- Series firewalls? (Choose two.)

  A. Using NGFW credits to deploy the firewall
  B. Securing public and private datacenter traffic
  C. Performing firewall administration using Azure Firewall Manager
  D. Securing inbound, outbound, and lateral traffic
  A. Using NGFW credits to deploy the firewall
  D. Securing inbound, outbound, and lateral traffic

• Question 69:

  A company has purchased Palo Alto Networks Software NGFW credits and wants to run PAN-OS 11.x virtual machines (VMs). Which two types of VMs can be selected when creating the deployment profile? (Choose two.)

  A. VM-100
  B. Fixed vCPU models
  C. Flexible model of working memory
  D. Flexible vCPUs
  B. Fixed vCPU models
  D. Flexible vCPUs

• Question 70:

  What are three benefits of using Palo Alto Networks software firewalls in public cloud, private cloud, and hybrid cloud environments? (Choose three.)

  A. They allow for centralized management of all firewalls, regardless of where or how they are deployed.
  B. They allow for complex management of per-use case security needs through multiple point products.
  C. They provide consistent policy enforcement across all architectures, whether on- premises or in the cloud.
  D. They allow management of underlying public cloud architecture without needing to leave the firewall itself.
  E. They create a simplified consumption and deployment model throughout the production environment.
  A. They allow for centralized management of all firewalls, regardless of where or how they are deployed.
  C. They provide consistent policy enforcement across all architectures, whether on- premises or in the cloud.
  E. They create a simplified consumption and deployment model throughout the production environment.