Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SOFTWARE-FIREWAL Online Questions & Answers

• Question 71:

  Which three statements describe the functionality of a Dynamic Address Group in Security policy? (Choose three.)

  A. Its update requires "Commit" to enforce membership mapping.
  B. It allows creation and enforcement of consistent Security policy across multiple cloud environments.
  C. Tags cannot be defined statically on the firewall.
  D. It uses tags as filtering criteria to determine IP address mapping to a group.
  E. Its maximum number of registered IP addresses is dependent on the firewall platform.
  B. It allows creation and enforcement of consistent Security policy across multiple cloud environments.
  D. It uses tags as filtering criteria to determine IP address mapping to a group.
  E. Its maximum number of registered IP addresses is dependent on the firewall platform.

• Question 72:

  Which element protects and hides an internal network in an outbound flow?

  A. DNS sinkholing
  B. User-ID
  C. App-ID
  D. NAT
  D. NAT

• Question 73:

  Which three statements describe the functionality of Dynamic Address Groups and tags? (Choose three.)

  A. Static tags are part of the configuration on the firewall, while dynamic tags are part of the runtime configuration.
  B. Dynamic Address Groups that are referenced in Security policies must be committed on the firewall.
  C. To dynamically register tags, use either the XML API or the VM Monitoring agent on the firewall or on the User-ID agent.
  D. IP-Tag registrations to Dynamic Address Groups must be committed on the firewall after each change.
  E. Dynamic Address Groups use tags as filtering criteria to determine their members, and filters do not use logical operators.
  A. Static tags are part of the configuration on the firewall, while dynamic tags are part of the runtime configuration.
  B. Dynamic Address Groups that are referenced in Security policies must be committed on the firewall.
  C. To dynamically register tags, use either the XML API or the VM Monitoring agent on the firewall or on the User-ID agent.

• Question 74:

  An RFP from a customer who needs multi-cloud Layer 7 network security for both Amazon Web Services (AWS) and Azure environments is being evaluated. The requirements include full management control of the firewall, VPN termination, and BGP routing.

  Which firewall solution should be recommended to meet the requirements?

  A. VM-Series
  B. CN-Series
  C. Cloud NGFW
  D. PA-Series
  A. VM-Series

• Question 75:

  Which two deployment models are supported by Cloud NGFW for AWS? (Choose two.)

  A. Hierarchical
  B. Distributed
  C. Linear
  D. Centralized
  B. Distributed
  D. Centralized

• Question 76:

  Which two benefits are offered by flex licensing for VM-Series firewalls? (Choose two.)

  A. Credits that do not expire and are available until fully depleted
  B. Deployment of Cloud NGFWs, VM-Series firewalls, and CN-Series firewalls
  C. Ability to move credits between public and private cloud VM-Series firewall deployments
  D. Ability to add or remove subscriptions from software firewalls as needed
  C. Ability to move credits between public and private cloud VM-Series firewall deployments
  D. Ability to add or remove subscriptions from software firewalls as needed

• Question 77:

  Which three presales resources are available to field systems engineers for technical assistance, innovation consultation, and industry differentiation insights? (Choose three.)

  A. Palo Alto Networks consulting engineers
  B. Professional services delivery
  C. Technical account managers
  D. Reference architectures
  E. Palo Alto Networks principal solutions architects
  A. Palo Alto Networks consulting engineers
  D. Reference architectures
  E. Palo Alto Networks principal solutions architects

• Question 78:

  A customer has deployed several cloud applications in Amazon Web Services (AWS) by using the native cloud service provider (CSP) firewall, and has discovered that the native firewall provides limited visibility and protection. The customer seeks a solution that provides application visibility and advanced threat prevention, while still allowing for the use of the native AWS management interface to manage the firewall.

  A. Palo Alto Networks CDSS bundle for AWS firewalls
  B. Cloud NGFW for AWS
  C. AWS VPC VM-Series firewalls
  D. AWS Software credits
  B. Cloud NGFW for AWS

• Question 79:

  Which three solutions does Strata Cloud Manager (SCM) support? (Choose three.)

  A. Prisma Cloud
  B. CN-Series firewalls
  C. Prisma Access
  D. PA-Series firewalls
  E. VM-Series firewalls
  B. CN-Series firewalls
  D. PA-Series firewalls
  E. VM-Series firewalls

• Question 80:

  Which two software firewall types can protect egress traffic from workloads attached to an Azure vWAN hub? (Choose two.)

  A. Cloud NGFW
  B. PA-Series
  C. CN-Series
  D. VM-Series
  A. Cloud NGFW
  D. VM-Series