PCSFE practice questions 61–70

1. Question 61 · 101 in bank

   Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?

   • AAdvanced URL Filtering (AURLF)
   • BCortex Data Lake
   • CDNS Security
   • DPanorama VM-Series plugin

   Show answer

   Answer: A

   Explanation

   Answer is A: in addition to the protection offered by PAN-DB, Advanced URL Filtering provides real-time analysis using machine learning (ML) to defend against new and unknown threats.

   Source: Adapted from community discussion — Redrum702

   Next question

2. Question 62 · 101 in bank

   What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestration?

   • AAperture orchestration engine
   • BClient-ID
   • CDynamic Address Groups
   • DAPI Key

   Show answer

   Answer: D

   Next question

3. Question 63 · 101 in bank

   Which service, when enabled, provides inbound traffic protection?

   • AAdvanced URL Filtering (AURLF)
   • BThreat Prevention
   • CData loss prevention (DLP)
   • DDNS Security

   Show answer

   Answer: B

   Next question

4. Question 64 · 101 in bank

   Select 2

   Which two criteria are required to deploy VM-Series firewalls in high availability (HA)? (Choose two.)

   • AAssignment of identical licenses and subscriptions
   • BDeployment on a different host
   • CConfiguration of asymmetric routing
   • DDeployment on same type of hypervisor

   Show answer

   Answer: AD

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

5. Question 65 · 101 in bank

   What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?

   • AIt protects data center and internet gateway deployments.
   • BIt allows for automatic deployment, provisioning, and immediate policy enforcement without any manual intervention.
   • CIt ensures consistent security across the entire environment.
   • DIt allows extension of Zero Trust Network Security to the most remote locations and smallest branches.

   Show answer

   Answer: B

   References

   • docs.paloaltonetworks.com documentation

   Next question

6. Question 66 · 101 in bank

   Which type of group allows sharing cloud-learned tags with on-premises firewalls?

   • ADevice
   • BNotify
   • CAddress
   • DTemplate

   Show answer

   Answer: C

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

7. Question 67 · 101 in bank

   What needs to be configured to deploy VM-Series firewalls in Azure as an Active/Active High Availability (HA) pair?

   • AActive/Active HA is not supported in Azure
   • BHA3 Link
   • CFloating IP Address
   • DHA1 and HA2 Link

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

8. Question 68 · 101 in bank

   Select 3

   Organizations using multiple public and private cloud platforms can deploy and configure the VM-Series using which three toolsets? (Choose three.)

   • APanorama
   • BTerraform
   • CGithub
   • DAnsible
   • ECloudFormation

   Show answer

   Answer: ABD

   Next question

9. Question 69 · 101 in bank

   A data center experiences a power outage that results in the reboot of all ESXi servers, including the software firewall's virtual machine (VM). Subsequently, there is a notable decrease in performance. Most end users complain of being unable to access the internet. The system engineer is still able to log in to the firewall management console smoothly. What is most likely causing this issue?

   • AThe firewall license has expired.
   • BThe dataplane disk partitions are unable to mount after the reboot.
   • CThere is configuration file corruption on ESXi server.
   • DThe last saved configuration did not save properly in the boot up partition.

   Show answer

   Answer: B

   Explanation

   A "Performance" and "Most end users complain of being unable to access the internet". can be explained by the fact that the maximum number of sessions is limited if the firewall is not licensed. other answers do not make sense.

   Source: Adapted from community discussion — commit666

   Next question

10. Question 70 · 101 in bank

    Which type of Terraform code is commonly used to deploy infrastructure as code (IaC)?

    • ALibrary
    • BSDK
    • CModule
    • DPlugin

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCSFE practice, question 61. 101 questions available.