PCSFE practice questions 91–100

1. Question 91 · 101 in bank

   Which Cloud NGFW for AWS deployment method requires traffic to pass through an AWS Transit Gateway?

   • AEast-west
   • BCentralized
   • CInter VPC
   • DDistributed

   Show answer

   Answer: A

   Explanation

   A transit gateway is connects virtual private cloud and on-premises networks through a central hub. East-West traffic is defined as traffic that goes between VPCs. VPC traffic does not traverse a a transit gateway. A centralized model is a model that utilizes transit gateways. All this info is pulled from the aws transit gateway deployment guide. I think the Answer is B

   Source: Adapted from community discussion — 29fb203

   Next question

2. Question 92 · 101 in bank

   What can software next-generation firewall (NGFW) credits be used to provision?

   • ARemote browser isolation
   • BVirtual Panorama appliances
   • CMigrating NGFWs from hardware to VMs
   • DEnablement of DNS security

   Show answer

   Answer: B

   Explanation

   The correct answer is B Software NGFW credits can be used to fund Software NGFWs (VM-Series and CN-Series), Cloud-Delivered Security Services (CDSS), or virtual Panorama appliances in networks with or without internet access (air-gapped networks, for example). https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/license-the-vm-series-firewall/software-ngfw

   Source: Adapted from community discussion — javim

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

3. Question 93 · 101 in bank

   Select 3

   The Cloud NGFW for AWS can capture and save which three types of logs? (Choose three.)

   • AThreat
   • BWildFire submissions
   • CDecryption
   • DURL Filtering
   • ETraffic

   Show answer

   Answer: ACE

   Explanation

   Correct Answer: ACE Cloud NGFW can capture and save three types of logs. Traffic—Traffic logs display an entry for the start and end of each session. See Cloud NGFW for AWS Traffic Log Fields for more information. Threat—Threat logs display entries when traffic matches one of the security profiles attached to a security rule on the firewall. Each entry includes the following information: date and time; type of threat (such as virus or spyware); threat description or URL (Name column); alarm action (such as allow or block); and severity level. Decryption—Decryption logs display entries for unsuccessful TLS handshakes by default and can display entries for successful TLS handshakes if you enable them in Decryption policy.

   Source: Adapted from community discussion — Redrum702

   References

   • docs.paloaltonetworks.com documentation

   Next question

4. Question 94 · 101 in bank

   To troubleshoot a missing or expired license for a CN-Series firewall, which Panorama CLI command should be used?

   • Arequests tech-support dump
   • Brequests plugins vm-series list-dp-pods
   • Crequests plugins kubernetes get-node-license-info
   • Drequests plugins kubernetes get-license-tokens

   Show answer

   Answer: D

   Next question

5. Question 95 · 101 in bank

   What is the correct sequence of events for offloading by the Intelligent Traffic Offload (ITO) service?

   • ASample packets sent to ITO > ITO instructs Smart NIC to inspect of bypass > Smart NIC sends rest of flow to VM-Series for inspection
   • BITO instructs Smart NIC to inspect of bypass > Sample packets sent to ITO > Smart NIC forwards flow directly to destination
   • CSample packets sent to ITO > ITO instructs Smart NIC to inspect of bypass > Smart NIC forwards flow directly to destination
   • DITO instructs Smart NIC to inspect of bypass > Sample packets sent to ITO > Smart NIC sends rest of flow to VM-Series for inspection

   Show answer

   Answer: C

   Explanation

   "C" is the correct answer. The question is asking for the events for "offloading", not for "inspecting". Therefore the correct sequence is... 1) Sample packets sent to ITO 2) ITO instructs Smart NIC to inspect or bypass (bypass is the same as saying "offload") 3) Smart NIC forwards flow directly to destination (this is call "offloading" and bypasses inspection) Check out "Figure 2: ITO offload use case" in this blog: https://live.paloaltonetworks.com/t5/community-blogs/boost-vm-series-performance-with-smartnic-integration/ba-p/413658

   Source: Adapted from community discussion — Doobiedoo

   References

   • live.paloaltonetworks.com documentation

   Next question

6. Question 96 · 101 in bank

   Which tool or actions should users employ to estimate the amount of flex credits for VM-Series and CN-Series deployment?

   • ACloud NGFW for AWS Pricing Estimator
   • BOpen up a support case
   • CSoftware NGFW Flex Credits Calculator
   • DSoftware NGFW Credit Estimator

   Show answer

   Answer: D

   Next question

7. Question 97 · 101 in bank

   What does GlobalProtect gateway use to determine which resources a compliant device should be accessing and a non-compliant device should not be accessing?

   • AVPN posture
   • BDevice posture
   • CHost information profile (HIP)
   • DHost posture

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation

   Next question

8. Question 98 · 101 in bank

   Which path should be followed to set up K8s cluster monitoring?

   • APanorama > Plugins > General > Kubernetes > Setup
   • BPanorama > Plugins > Kubernetes > Setup > General
   • CPanorama > Plugins > Kubernetes > General > Setup
   • DPanorama > Plugins > Setup > Kubernetes > General

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation

   Next question

9. Question 99 · 101 in bank

   What must be obtained to deploy a pay-as-you-go (PAYG) based VM-Series firewall in Amazon Web Services (AWS) through the marketplace?

   • AMAC address
   • BAmazon Machine Image (AMI)
   • CAmazon auth code
   • DPAN-OS update

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

10. Question 100 · 101 in bank

    What is the maximum number of Kubernetes clusters Panorama can support?

    • A8
    • B16
    • C32
    • D64

    Show answer

    Answer: C

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCSFE practice, question 91. 101 questions available.