VCEdump

PSE-SOFTWARE-FIREWAL Palo Alto Networks Systems Engineer Professional - Software Firewall

PDF question preview Back to product

Reading controls

Reader tools

Free demo

13 of 85 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice5

Multiple choice8

Palo Alto Networks · PSE-SOFTWARE-FIREWAL

Free PSE-SOFTWARE-FIREWAL Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Multiple choice

Which two features offer the ability to manage Cloud NGFW in Azure or AWS? (Choose two.)

A
Azure Firewall Portal
B
Palo Alto Networks Ansible playbooks
C
Panorama
D
AWS Firewall Manager

Reveal answer details Close answer details

Correct answersB, C

Question 2

Multiple choice

What are two benefits of using a Palo Alto Networks NGFW in a public cloud environment? (Choose two.)

A
Complete security solution for the public cloud provider's physical host regardless of security measures
B
Automatic scaling of NGFWs to meet the security needs of growing applications and public cloud environments
C
Ability to manage the public cloud provider's physical hosts
D
Consistent Security policy to inbound, outbound, and east-west network traffic throughout the multi-cloud environment

Reveal answer details Close answer details

Correct answersB, D

Question 3

Single choice

Which tool can automate the deployment of VM-Series next-generation firewalls into supported public cloud service provider (CSP) environments?

A
Panorama
B
Terraform Automated Config agent
C
Public Cloud Manager (PCM) tenant
D
Docker Swarm

Reveal answer details Close answer details

Correct answerB

Question 4

Single choice

A customer has deployed several cloud applications in Amazon Web Services (AWS) by using the native cloud service provider (CSP) firewall, and has discovered that the native firewall provides limited visibility and protection. The customer seeks a solution that provides application visibility and advanced threat prevention, while still allowing for the use of the native AWS management interface to manage the firewall.

A
Palo Alto Networks CDSS bundle for AWS firewalls
B
Cloud NGFW for AWS
C
AWS VPC VM-Series firewalls
D
AWS Software credits

Reveal answer details Close answer details

Correct answerB

Question 5

Single choice

Why are VM-Series firewalls now grouped by four tiers?

A
To obscure the supported hypervisor manufacturer into generic terms
B
To simplify the portfolio and reduce the number of VM-Series models customers must choose from
C
To define the maximum limits for key criteria based on allocated memory
D
To define the priority level of support customers expect when opening a TAC case, from lowest tier 1 to highest tier 4

Reveal answer details Close answer details

Correct answerB

Question 6

Multiple choice

Which three resources are deployment options for Cloud NGFW for Azure or AWS? (Choose three.)

A
Azure CLI or Azure Terraform Provider
B
Azure Portal
C
AWS Firewall Manager
D
Panorama AWS and Azure plugins
E
Palo Alto Networks Ansible playbooks

Reveal answer details Close answer details

Correct answersA, B, E

Question 7

Multiple choice

What are two characteristics of firewall flex credit profiles of a credit pool in the Palo Alto Networks Customer Support Portal? (Choose two.)

A
Each VM-Series firewall deployment profile can be either fixed or flexible until defined and saved.
B
All firewalls activated to a deployment profile will have the same subscriptions.
C
The number of licensed cores must match the number of provisioned CPU cores per instance.
D
Allocate credits for use with Cloud NGFW for AWS and Azure.

Reveal answer details Close answer details

Correct answersA, D

Question 8

Multiple choice

What are three benefits of Palo Alto Networks VM-Series firewalls as they relate to direct integration with third-party network virtualization solution providers? (Choose three.)

A
Integration with Cisco ACI allows insertion of a virtual firewall and enforcement of dynamic policies between endpoint groups without the need for manual policy adjustments.
B
Integration with a third-party network virtualization solution allows management and deployment of the entire virtual network and hosts directly from Panorama.
C
Integration with Nutanix AHV allows the firewall to be dynamically informed of changes in the environment and ensures policy is applied to virtual machines (VMs) as they join the network.
D
Integration with VMware NSX provides comprehensive visibility and security of all virtualized data
center traffic including intra-host ESXi virtual machine (VM) communications.
E
Integration with network virtualization solution providers allows manual deployment and management of firewall rules through multiple interfaces and front ends specific to each technology.

Reveal answer details Close answer details

Correct answersA, C, D

Question 9

Multiple choice

Which two public cloud service provider (CSP) environments offer, through their marketplace, a Cloud NGFW under the CSP's own brand name? (Choose two.)

A
Oracle Cloud Infrastructure (OCI)
B
IBM Cloud (previously Softlayer)
C
Alibaba Cloud
D
Google Cloud Platform (GCP)

Reveal answer details Close answer details

Correct answersA, D

Question 10

Multiple choice

Which two statements describe the functionality of the VM-Series firewall plugin? (Choose two.)

A
The installed VM-Series firewall plugin on the VM-Series firewall can only be upgraded or deleted.
B
The Panorama plugin must be installed on the VM-Series firewall to enable communication with Panorama.
C
To use Panorama to configure public cloud VM-Series firewall integrations, the VM-Series firewall plugin must be installed on Panorama.
D
The VM-Series firewall plugin on Panorama is not built in and must be installed to enable communication and manage the environment.

Reveal answer details Close answer details

Correct answersC, D

Question 11

Single choice

Which public cloud provider requires the creation of subnets that are dedicated to Cloud NGFW endpoints?

A
Google Cloud Platform (GCP)
B
Alibaba Cloud
C
Amazon Web Services (AWS)
D
Microsoft Azure

Reveal answer details Close answer details

Correct answerC

Question 12

Single choice

Why should a customer use advanced versions of Cloud-Delivered Security Services (CDSS) subscriptions compared to legacy versions when creating or editing a deployment profile?

(e.g., using Advanced Threat Prevention instead of Threat Prevention.)

A
To improve firewall throughput by inspecting hashes of advanced packet headers
B
To download and install new threat-related signature databases in real-time
C
To use cloud-scale machine learning inline for detection of highly evasive and zero-day threats
D
To use external dynamic lists for blocking known malicious threat sources and destinations

Reveal answer details Close answer details

Correct answerC

Question 13

Multiple choice

Which three statements describe the functionality of Dynamic Address Groups and tags? (Choose three.)

A
Static tags are part of the configuration on the firewall, while dynamic tags are part of the runtime configuration.
B
Dynamic Address Groups that are referenced in Security policies must be committed on the firewall.
C
To dynamically register tags, use either the XML API or the VM Monitoring agent on the firewall or on the User-ID agent.
D
IP-Tag registrations to Dynamic Address Groups must be committed on the firewall after each change.
E
Dynamic Address Groups use tags as filtering criteria to determine their members, and filters do not use logical operators.

Reveal answer details Close answer details

Correct answersA, B, C

VOL	TYPE	QUESTIONS
1	Single choice	5
2	Multiple choice	8

Free PSE-SOFTWARE-FIREWAL Exam Dumps Preview

Palo Alto Networks Systems Engineer Professional - Software Firewall

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13