Free Palo Alto Networks Certified Software Firewall Engineer Exam PCSFE Exam Practice Test

What is a benefit of network runtime security?

• It more narrowly focuses on one security area and requires careful customization integration and maintenance
• It removes vulnerabilities that have been baked into containers.
• It is siloed to enhance workload security.
• It identifies unknown vulnerabilities that cannot be identified by known Common Vulnerability and Exposure (CVE) lists.

How does Prisma Cloud Compute offer workload security at runtime?

• It automatically builds an allow-list security model for every container and service.
• It quarantines containers that demonstrate increased CPU and memory usage.
• It automatically patches vulnerabilities and compliance issues for every container and service.
• It works with the identity provider (IdP; to identify overprivileged containers and services and it restricts network access

A CN-Series firewall can secure traffic between which elements?

• Host containers
• Source applications
• Containers
• IPods

Which component can provide application-based segmentation and prevent lateral threat movement?

• DNS Security
• NAT
• URL Filtering
• App-ID

What must be enabled when using Terraform templates with a Cloud next-generation firewall (NGFW) for Amazon Web Services (AWS)?

• AWS CloudWatch logging
• Access to the Cloud NGFW for AWS console
• Access to the Palo Alto Networks Customer Support Portal
• AWS Firewall Manager console access

Which two design options address split brain when configuring high availability (HA)? (Choose two.)Adding a backup HA1 interfaceUsing the heartbeat backupBundling multiple interfaces in an aggregated interface group and assigning HA2Sending heartbeats across the HA2 interfaces

• The HA1 interface is used for exchanging HA state information and configuration synchronization between the firewalls. Adding a backup HA1 interface provides redundancy and failover protection for the HA1 interface, ensuring that the firewalls can maintain their HA communication and avoid split brain. Using the heartbeat backup is a design option that addresses split brain when configuring HA. The heartbeat backup is a mechanism that allows the firewalls to send additional heartbeat messages through an alternate path, such as a management interface or a data interface, to verify the health of the peer firewall. Using the heartbeat backup prevents split brain caused by network failures or device failures that affect the primary HA interfaces. Bundling multiple interfaces in an aggregated interface group and assigning HA2, and sending heartbeats across the HA2 interfaces are not design options that address split brain when configuring HA, but they are related features that can enhance performance and reliability.

Which two public cloud platforms does the VM-Series plugin support? (Choose two.)

• Azure
• llBM Cloud
• Amazon Web Services
• lOCI

Why are VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster problematic for protecting containerized workloads?

• They are located outside the cluster and have no visibility into application-level cluster traffic.
• They do not scale independently of the Kubernetes cluster.
• They are managed by another entity when located inside the cluster.
• They function differently based on whether they are located inside or outside of the cluster.

Where do CN-Series devices obtain a VM-Series authorization key?

• Panorama
• Local installation
• GitHub
• Customer Support Portal

How are CN-Series firewalls licensed?

• Data-plane vCPU
• Service-plane vCPU
• Management-plane vCPU
• Control-plane vCPU