Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional Practice Questions

Question # 11

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

Options:

A.  

Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall.

B.  

Enable communication between Panorama and the NSX Manager.

C.  

Register the VM-Series firewall as a service.

D.  

Obtain the Amazon Machine Images (AMIs) from marketplace.

Discussion 0
Question # 12

Which solution is best for securing an EKS environment?

Options:

A.  

API orchestration

B.  

CN-Series high availability (HA) pair

C.  

PA-Series using load sharing

D.  

VM-Series single host

Discussion 0
Question # 13

What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?

Options:

A.  

It allows for automatic deployment, provisioning, and immediate policy enforcement without any manual intervention.

B.  

It ensures consistent security across the entire environment.

C.  

It allows extension of Zero Trust Network Security to the most remote locations and smallest branches.

D.  

It protects data center and internet gateway deployments.

Discussion 0
Question # 14

Why are VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster problematic for protecting containerized workloads?

Options:

A.  

They function differently based on whether they are located inside or outside of the cluster.

B.  

They are located outside the cluster and have no visibility into application-level cluster traffic.

C.  

They are managed by another entity when located inside the cluster.

D.  

They do not scale independently of the Kubernetes cluster.

Discussion 0
Question # 15

How does a CN-Series firewall prevent exfiltration?

Options:

A.  

It distributes incoming virtual private cloud (VPC) traffic across the pool of VM-Series firewalls.

B.  

It inspects outbound traffic content and blocks suspicious activity.

C.  

It provides a license deactivation API key.

D.  

It employs custom-built signatures based on hash.

Discussion 0
Question # 16

Which two valid components are used in installation of a VM-Series firewall in an OpenStack environment? (Choose two.)

Options:

A.  

VM-Series VHD image

B.  

OpenStack heat template in JSON format

C.  

VM-Series qcow2 image

D.  

OpenStack heat template in YAML Ain’t Markup Language (YAML) format

Discussion 0
Question # 17

Which software firewall would help a prospect interested in securing an environment with Kubernetes?

Options:

A.  

ML-Series

B.  

CN-Series

C.  

KN-Series

D.  

VM-Series

Discussion 0
Question # 18

Which type of group allows sharing cloud-learned tags with on-premises firewalls?

Options:

A.  

Notify •

B.  

Address

C.  

Template

D.  

Device

Discussion 0
Question # 19

What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments with network security delivered as a managed cloud service?

Options:

A.  

Ion-Series Ion-Series

B.  

CN-Series

C.  

Cloud next-generation firewall (NGFW)

D.  

VM-Series

Discussion 0

PSE-SoftwareFirewall PDF

PSE-SoftwareFirewall PDF (Printable)
$46.5
$154.99

PSE-SoftwareFirewall Testing Engine

PSE-SoftwareFirewall PDF (Printable)
$51
$169.99

PSE-SoftwareFirewall PDF + Testing Engine

PSE-SoftwareFirewall PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions