Which three statements describe the functionality of Panorama plugins? (Choose three.)

Supports other Palo Alto Networks products and configurations with NGFWs

May be installed on Panorama from the Palo Alto Networks customer support portal

Expands capabilities of hardware and software NGFWs

Limited to one plugin installation on Panorama

Supports other Palo Alto Networks products and configurations with NGFWs

May be installed on Panorama from the Palo Alto Networks customer support portal

Complies with third-party product/platform integration and configuration with NGFWs

Expands capabilities of hardware and software NGFWs

Why are VM-Series firewalls now grouped by four tiers?

To simplify the portfolio and reduce the number of VM-Series models customers must choose from

To obscure the supported hypervisor manufacturer into generic terms

To simplify the portfolio and reduce the number of VM-Series models customers must choose from

To define the maximum limits for key criteria based on allocated memory

To define the priority level of support customers expect when opening a TAC case, from lowest tier 1 to highest tier 4

Which three resources are deployment options for Cloud NGFW for Azure or AWS? (Choose three.)

Azure CLI or Azure Terraform Provider

Palo Alto Networks Ansible playbooks

Azure CLI or Azure Terraform Provider

Palo Alto Networks Ansible playbooks

Which three Cloud NGFW management tasks are inherently performed by the service within AWS and Azure? (Choose three.)

Horizontally scaling out to meet increased traffic demand

Installing new content (applications and threats)

Installing new PAN-OS software updates

Horizontally scaling out to meet increased traffic demand

Installing new content (applications and threats)

Installing new PAN-OS software updates

Blocking high-risk S2C threats in accordance with SOC2 compliance

Decrypting high-risk SSL traffic

Which statement applies when identifying the appropriate Palo Alto Networks firewall platform for virtualized as well as cloud environments?

All NGFW platforms support API integration.

VM-Series firewalls cannot be used to protect container environments.

All NGFW platforms support API integration.

Panorama is the only unified management console for all NGFWs.

CN-Series firewalls are used to protect virtualized environments.

What are three valid methods that use firewall flex credits to activate VM-Series firewall licenses by specifying authcode? (Choose three.)

/config/bootstrap.xml file of complete bootstrapping package

/license/authcodes file of complete bootstrap package

authcodes= key value pair of basic bootstrapping configuration

/config/bootstrap.xml file of complete bootstrapping package

/license/authcodes file of complete bootstrap package

Panorama device group in Panorama SW Licensing Plugin

authcodes= key value pair of Azure Vault configuration

authcodes= key value pair of basic bootstrapping configuration

A company has used software NGFW credits to deploy several VM-Series firewalls with Advanced URL Filtering in the company's deployment profiles. The IT department has determined that the firewalls no longer need the Advanced URL Filtering license.How can this license be removed from the hosts?

Edit the current deployment profile to remove the Advanced URL Filtering license.

On the firewall, issue this command: > delete url subscription license.

Add a new deployment profile with all the licenses selected except Advanced URL Filtering.

Delete the current deployment profile from the cloud service provider.

Which two public cloud service provider (CSP) environments offer, through their marketplace, a Cloud NGFW under the CSP's own brand name? (Choose two.)

Oracle Cloud Infrastructure (OCI)

IBM Cloud (previously Softlayer)

Which three presales resources are available to field systems engineers for technical assistance, innovation consultation, and industry differentiation insights? (Choose three.)

Palo Alto Networks consulting engineers

Palo Alto Networks principal solutions architects

Palo Alto Networks consulting engineers

Palo Alto Networks principal solutions architects

Which three statements describe functionality of NGFW inline placement for Layer 2/3 implementation? (Choose three.)

VMs on VMware ESXi hypervisors can be segregated from one another on the network by the VM-Series NGFW by IP addressing and Layer 3 gateways.

VMs on VMware ESXi hypervisors can be segregated from each other by the VM-Series NGFW using VLAN tags while preserving existing Layer 3 gateways.

A next-generation firewall VLAN interface can function as a Layer 3 interface.

VMs on VMware ESXi hypervisors can be segregated from one another on the network by the VM-Series NGFW by IP addressing and Layer 3 gateways.

VMs on VMware ESXi hypervisors can be segregated from each other by the VM-Series NGFW using VLAN tags while preserving existing Layer 3 gateways.

VM-Series next-generation firewalls cannot be positioned between the physical datacenter network and guest VM workloads.

VM-Series next-generation firewalls do not support VMware vMotion or guest VM workloads.

A next-generation firewall VLAN interface can function as a Layer 3 interface.

What are three Palo Alto Networks VM-Series firewall reference architecture deployment models? (Choose three.)

AWS VM-Series: Isolated Transit Gateway

Cloud NGFW for Azure: Virtual WAN integration

GCP VM-Series: VPC network peering model with Shared VPC

Cloud NGFW for AWS: Combined Model

AWS VM-Series: Isolated Transit Gateway

Cloud NGFW for Azure: Virtual WAN integration

GCP VM-Series: VPC network peering model with Shared VPC

Azure VM-Series: Distributed VCN - common firewall

What are two methods or tools to directly automate the deployment of VM-Series NGFWs into supported public clouds? (Choose two.)

GitHub PaloAltoNetworks Terraform SWFW modules

Deployment configuration in the public cloud Panorama plugins

paloaltonetworks.panos Ansible collection

What are two benefits of credit-based flexible licensing for software firewalls? (Choose two.)

Add Cloud-Delivered Security Services (CDSS) subscriptions to CN-Series firewalls.

Add Cloud-Delivered Security Services (CDSS) subscriptions to PA-Series firewalls.

What is an advantage of using a Palo Alto Networks Cloud NGFW compared to deploying a VM-Series firewall in the cloud?

Cloud NGFW integrates natively into the AWS management console.

The customer maintains complete control of the Cloud NGFW.

Layer 2 network functionality can be customized on Cloud NGFW.

Cloud NGFW can easily be deployed using NGFW Software Credits.

A prospective customer plans to migrate multiple applications to Amazon Web Services (AWS) and is considering deploying Palo Alto Networks NGFWs to protect these workloads from threats. The customer currently uses Panorama to manage on-premises firewalls and wants to avoid additional management complexity.Which AWS deployment option meets the customer's technical and business value requirements while minimizing risk exposure?

Software NGFW credits and Strata Cloud Manager (SCM)

Cloud NGFWs and Strata Cloud Manager (SCM)

Software NGFW credits and Panorama

A customer with multiple virtual private clouds (VPCs) in Amazon Web Services (AWS) protected by the cloud-native firewall experiences a cloud breach. As a result, malware spreads quickly across the VPCs, infecting several workloads.Which minimum solution should be proposed to prevent similar incidents in the future?

Implement a Cloud NGFW for each VPC.

Purchase a software credit pool for flexible Cloud NGFW deployment across the VPCs.

Subscribe to Palo Alto Networks Advanced Threat Protection for the cloud-native firewall.

Implement a Cloud NGFW for each VPC.

Which two features offer the ability to manage Cloud NGFW in Azure or AWS? (Choose two.)

Palo Alto Networks Ansible playbooks

What is a benefit of credit-based flexible licensing for software firewalls?

Permanently setting the capabilities of the software firewalls

Adding Cloud-Delivered Security Services (CDSS) to CN-Series firewalls

Adding subscriptions to PA-Series firewalls

What are two benefits of using Palo Alto Networks NGFWs in a public cloud service provider (CSP) environment? (Choose two.)

Consistent Security policies throughout the multi-cloud environment

Management of all network traffic in every CSP environment

Consistent Security policies throughout the multi-cloud environment

Deployable in any CSP environment

Which two presales methods will help secure the technical win of software firewalls? (Choose two.)

Proof of Value (POV) product evaluations

Network Security Design workshops

PA-Series security lifecycle review (SLR) report

Proof of Value (POV) product evaluations

Network Security Design workshops

Link to PAYG Cloud NGFW in the Azure Marketplace

Which two benefits are offered by flex licensing for VM-Series firewalls? (Choose two.)

Ability to move credits between public and private cloud VM-Series firewall deployments

Ability to add or remove subscriptions from software firewalls as needed

Credits that do not expire and are available until fully depleted

Deployment of Cloud NGFWs, VM-Series firewalls, and CN-Series firewalls

Ability to move credits between public and private cloud VM-Series firewall deployments

Ability to add or remove subscriptions from software firewalls as needed

Which statement is valid for both VM-Series firewalls and Cloud NGFWs?

Panorama can manage VM-Series firewalls and Cloud NGFWs.

VM-Series firewalls and Cloud NGFWs can be deployed in a customer's private cloud.

Panorama can manage VM-Series firewalls and Cloud NGFWs.

Updates for VM-Series firewalls and Cloud NGFWs are performed by the customer.

VM-Series firewalls and Cloud NGFWs can be deployed in all public cloud vendor environments.

Which method fully automates the initial deployment, configuration, licensing, and threat content download when setting up a new VM-Series firewall?

Deploy a complete bootstrap package by using an ISO image, block storage, or a storage bucket.

Register the VM-Series firewall and launch the Day 1 Configuration Wizard.

Use Panorama to push device groups and template stack configurations to the new VM-Series firewall.

Deploy a complete bootstrap package by using an ISO image, block storage, or a storage bucket.

Connect the VM-Series firewall to Panorama and push the configuration package by using the bootstrap plugin.

Which tool can automate the deployment of VM-Series next-generation firewalls into supported public cloud service provider (CSP) environments?

Terraform Automated Config agent

Public Cloud Manager (PCM) tenant

What is required to manage a VM-Series firewall with Panorama?

VPN connection from the firewall to Panorama

Where are auth codes registered in the bootstrapping process?

Palo Alto Networks Support Portal

Which tool can be used to deploy a CN-Series firewall?

GCP Automated Deployment Services

Terraform Automated Deployment Services

What is an advantage of using advanced versions of Cloud-Delivered Security Services (CDSS) subscriptions compared to legacy versions of CDSS?

Threats are detected with inline cloud-scale machine learning (ML).

New threat-related signature databases can be downloaded and installed in real time.

External dynamic lists block known malicious threat sources and destinations.

Firewall throughput is improved by inspecting hashes of advanced packet headers.

Palo Alto Networks PSE-SWFW-Pro-24 Practice Test 2 - Free Online Exam Prep & Questions

Which three capabilities and characteristics are shared by the deployments of Cloud NGFW for Azure and VM-Series firewalls? (Choose three.)

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PSE-SWFW-Pro-24 Practice Test 2

Question

Palo Alto Networks PSE-SWFW-Pro-24 Practice Tests

Practice Tests