Free Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional Exam PSE-SoftwareFirewall Exam Practice Test

With which two private cloud environments does Palo Alto Networks have deep integrations? (Choose two.)

• Cisco ACI
• VMware NSX-T
• Nutanix
• Dell APEX

What is the structure of the YAML Ain't Markup Language (YAML) file repository?

• Environment/Kubernetes/Deployment_Type
• Kubernetes/Environment/Deployment_Type
• Deployment_Type/Kubernetes/Environment
• Kubernetes/Deployment_Type/Environment

What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?

• It allows for automatic deployment, provisioning, and immediate policy enforcement without any manual intervention.
• It ensures consistent security across the entire environment.
• It allows extension of Zero Trust Network Security to the most remote locations and smallest branches.
• It protects data center and internet gateway deployments.

How are CN-Series firewalls licensed?

• Management-plane vCPU
• Data-plane vCPU
• Control-plane vCPU
• Service-plane vCPU

Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?

• Cortex Data Lake
• DNS Security
• Panorama VM-Series plugin
• Advanced URL Filtering (AURLF)

Which two configuration options does Palo Alto Networks recommend for outbound high availability (HA) design in Amazon Web Services using a VM-Series firewall? (Choose two.)

• Traditional active-active HA
• Transit gateway and Security VPC
• Traditional active-passive HA
• Transit VPC and Security VPC

Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?

• Dynamic Address Group
• Hypervisor integration
• Bootstrapping
• Boundary automation

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

• Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall.
• Enable communication between Panorama and the NSX Manager.
• Register the VM-Series firewall as a service.
• Obtain the Amazon Machine Images (AMIs) from marketplace.

Which component can provide application-based segmentation and prevent lateral threat movement?

• DNS Security
• NAT
• App-ID •
• URL Filtering

What is a design consideration for a prospect who wants to deploy VM-Series firewalls in an Amazon Web Services (AWS) environment?

• Resources are shared within the cluster.
• Only active-passive high availability (HA) is supported.
• High availability (HA) clusters are limited to fewer than 8 virtual appliances.
• Special AWS plugins are needed for load balancing.