Question 31 · 101 in bank
Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?
Show answer
Answer: D
Palo Alto Networks Certified Software Firewall Engineer101 questions across 11 pages are complete and free, with no account or card.
101 questions in this bank
Free access · progress saved on this device
Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?
Answer: D
Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)
Answer: BC
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)
Answer: AD
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?
Answer: D
What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments with network security delivered as a managed cloud service?
Answer: B
What do tags allow a VM-Series firewall to do in a virtual environment?
Answer: B
Which two methods of Zero Trust implementation can benefit an organization? (Choose two.)
Answer: BD
Correct answers are B & D - Boundaries are established is a method of Zero Trust implementation that involves defining and segmenting the network into smaller zones based on data sensitivity, user identity, device type, or application function. Boundaries are established can benefit an organization by isolating and protecting critical assets from unauthorized access or lateral movement. - Access controls are enforced can benefit an organization by preventing data exfiltration, malware propagation, or credential theft. Compliance is validated and security automation is seamlessly integrated are not methods of Zero Trust implementation, but they may be potential outcomes or benefits of implementing Zero Trust.
Source: Adapted from community discussion — javim
Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)
Answer: BC
I think it should be: BC "Use the licensing API to register auth codes, retrieve licenses attached to an auth code, renew licenses, or deactivate all licenses on a VM-Series firewall" https://docs.paloaltonetworks.com/vm-series/10-2/vm-series-deployment/license-the-vm-series-firewall/vm-series-models/licensing-api
Source: Adapted from community discussion — glorki
What are two environments supported by the CN-Series firewall? (Choose two.)
Answer: BD
You can deploy CN-Series on all private and public cloud flavors of Kubernetes, including AKS, EKS, GKE, OpenShift, Oracle, Rancher, native Kubernetes, and VMware Tanzu. Use either a manual process or program an automated combination of Helm charts and Terraform templates.
Source: Adapted from community discussion — javim
Why are VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster problematic for protecting containerized workloads?
Answer: A
A is the correct answer. The VM-Series sits outside the cluster so it's unable to inspect intra-cluster containers. This is the main use case for deploying CN-Series firewalls.
Source: Adapted from community discussion — Doobiedoo
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCSFE practice, question 31. 101 questions available.
Version 1.0.0. How we source questions