Question 81 · 101 in bank
Select 2Which two statements apply to the VM-Series plugin? (Choose two.)
Show answer
Answer: BC
Palo Alto Networks Certified Software Firewall Engineer101 questions across 11 pages are complete and free, with no account or card.
101 questions in this bank
Free access · progress saved on this device
Which two statements apply to the VM-Series plugin? (Choose two.)
Answer: BC
To get the current auth code applied to a CN-Series firewall, which Panorama CLI command should be used?
Answer: A
What are the three required ethernet interfaces to deploy the VM-Series in AWS as a centralized model? (Choose three.)
Answer: BCE
The correct answer are BCE "Because this design model uses overlay routing, the VM-Series firewall requires three Ethernet interfaces: a management interface, a private dataplane interface for traffic from the GWLB, and a public dataplane interface for outbound traffic." https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/guides/aws-transit-gateway-deployment-guide
Source: Adapted from community discussion — javim
What is the minimum number of management interfaces created when the Google Cloud Platform (GCP) Marketplace deploys an instance of the VM-Series firewall?
Answer: A
A: One management, and two data plane. The Marketplace deploys an instance of the VM-Series firewall with a minimum of one management interface and two dataplane interfaces (Trust and Untrust) https://docs.paloaltonetworks.com/vm-series/10-2/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-vm-series-on-gcp/deploy-the-vm-series-firewall-on-gcp
Source: Adapted from community discussion — scn_lewisk
What must be done in Panorama to enable the CN-MGMT to connect to Panorama?
Answer: A
What is the default log destination for S3 bucket in the Cloud NGFW CloudFormation template (CFT) that is launched to set up the tenant?
Answer: B
After configuring a new software VM-Series firewall, the network team cannot detect any traffic being transmitted or received on the correct VLAN of the network switch. However, they are able to ping the management IP. Which two actions should be taken to troubleshoot this issue? (Choose two.)
Answer: CD
An engineer is setting up tags in Panorama, but it is not working. How can the engineer verify the issue while viewing the Amazon Web Services (AWS) plugin logs from the CLI?
Answer: C
Answer appears to be C: PLUG-2246 When viewing Panorama plugin for AWS logs, you cannot use the tail command. To view the AWS plugin logs from the CLI, use the following command: less plugins-log
Source: Adapted from community discussion — Redrum702
What is the maximum number of vCPUs can software NGFW licensing support with NGFW flex licensing?
Answer: C
In the Cloud NGFW for Amazon Web Services (AWS) centralized inbound deployment architecture, what is the next hop for the traffic after it passes through the application load balancer (ALB)?
Answer: A
Centralized Inbound 1. Traffic from the internet arrives at the internet gateway. 2. The internet gateway routes traffic to the application load balancer (ALB). 3. The ALB then sends traffic to the ingress VPC TGW ENI. 4. The TGW ENI sends traffic to the TGW. 5. The TGW routes traffic to the security VPC TGW ENI. 6. The TGW ENI sends traffic to NGFW endpoint and on to the NGFW for inspection. 7. If the traffic is allowed, the NGFW endpoint sends the traffic to TGW. 8. The TGW then routes the traffic to the protected VPC TGW ENI and then on to the destination. [https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/create-cloud-ngfw-instances-and-endpoints/direct-traffic-to-cloud-ngfw-for-aws/cloud-ngfw-for-aws-centralized-deployments]
Source: Adapted from community discussion — 3574e4e
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCSFE practice, question 81. 101 questions available.
Version 1.0.0. How we source questions