Which two valid components are used in installation of a VM-Series firewall in an OpenStack environment? (Choose two.)

OpenStack heat template in YAML Ain't Markup Language (YAML) format

OpenStack heat template in JSON format

OpenStack heat template in YAML Ain't Markup Language (YAML) format

How does a CN-Series firewall prevent exfiltration?

It inspects outbound traffic content and blocks suspicious activity.

It employs custom-built signatures based on hash

It distributes incoming virtual private cloud (VPC) traffic across the pool of VM-Series firewalls.

It provides a license deactivation API key.

It inspects outbound traffic content and blocks suspicious activity.

What helps avoid split brain in active-passive high availability (HA) pair deployment?

Using the management interface as the HA1 backup link

Using a standard traffic interface as the HA2 backup

Enabling preemption on both firewalls in the HA pair

Using the management interface as the HA1 backup link

Using a standard traffic interface as the HA3 link

What must be enabled when using Terraform templates with a Cloud next-generation firewall (NGFW) for Amazon Web Services (AWS)?

Access to the Cloud NGFW for AWS console

Access to the Palo Alto Networks Customer Support Portal

AWS Firewall Manager console access

How does Prisma Cloud Compute offer workload security at runtime?

It automatically builds an allow-list security model for every container and service.

It quarantines containers that demonstrate increased CPU and memory usage.

It automatically patches vulnerabilities and compliance issues for every container and service.

It works with the identity provider (IdP; to identify overprivileged containers and services and it restricts network access

What is the structure of the YAML Ain't Markup Language (YAML) file repository?

Kubernetes/Deployment Type/Environment

Deployment Type/Kubernetes/Environment

Kubernetes/Deployment Type/Environment

Kubernetes/Environment/Deplovment Type

Environment/Kubernetes/Deployment Type

Which feature must be configured in an NSX environment to ensure proper operation of a VM-Series firewall in order to secure east-west traffic?

User-ID agent on a Windows domain server

Device groups within VMware Services Manager

What are two requirements for automating service deployment of a VM-Series firewall from an NSX Manager? (Choose two.)

Panorama has been configured to recognize both the NSX Manager and vCenter.

The deployed VM-Series firewall can establish communications with Panorama.

vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls.

Panorama has been configured to recognize both the NSX Manager and vCenter.

The deployed VM-Series firewall can establish communications with Panorama.

Panorama can establish communications to the public Palo Alto Networks update servers.

Regarding network segmentation, which two steps are involved in the configuration of a default route to an internet router? (Choose two.)

Select the Static Routes tab, then click Add.

Select Network > Virtual Router, then select the default link to open the Virtual Router dialog.

Select the Static Routes tab, then click Add.

Select the Config tab. then select New Route from the Security Zone Route drop-down menu.

Select Network > Virtual Router, then select the default link to open the Virtual Router dialog.

Why are containers uniquely suitable for runtime security based on allow lists?

Containers have only a few defined processes that should ever be executed.

Developers define the processes used in containers within the Dockerfile.

Docker has a built-in runtime analysis capability to aid in allow listing.

Operations teams know which processes are used within a container.

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

Enable communication between Panorama and the NSX Manager.

Register the VM-Series firewall as a service.

Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall.

Obtain the Amazon Machine Images (AMIs) from marketplace.

Enable communication between Panorama and the NSX Manager.

Register the VM-Series firewall as a service.

How are Palo Alto Networks Next-Generation Firewalls (NGFWs) deployed within a Cisco ACI architecture?

Service graphs are configured to allow their deployment.

SDN code hooks can help detonate malicious file samples designed to detect virtual environments.

Traffic can be automatically redirected using static address objects.

Service graphs are configured to allow their deployment.

VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.

Which two configuration options does Palo Alto Networks recommend for outbound high availability (HA) design in Amazon Web Services using a VM-Series firewall? (Choose two.)

Transit gateway and Security VPC

Which two criteria are required to deploy VM-Series firewalls in high availability (HA)? (Choose two.)

Assignment of identical licenses and subscriptions

Configuration of asymmetric routing

Deployment on same type of hypervisor

What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?

It allows for automatic deployment, provisioning, and immediate policy enforcement without any manual intervention.

It protects data center and internet gateway deployments.

It allows for automatic deployment, provisioning, and immediate policy enforcement without any manual intervention.

It ensures consistent security across the entire environment.

It allows extension of Zero Trust Network Security to the most remote locations and smallest branches.

Palo Alto Networks PCSFE Practice Test 2 - Free Online Exam Prep & Questions

Which software firewall would help a prospect interested in securing an environment with Kubernetes?

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PCSFE Practice Test 2

Question

Palo Alto Networks PCSFE Practice Tests

Practice Tests