Free Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional Exam PSE-SoftwareFirewall Exam Practice Test

What can software next-generation firewall (NGFW) credits be used to provision?

• Enablement of DNS security
• Virtual Panorama appliances
• Remote browser isolation
• Migrating NGFWs from hardware to VMs

Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?

• OCSP
• Advanced URL Filtering (AURLF)
• Secure Sockets Layer (SSL) Inbound Inspection
• WildFire

What is a design consideration for a prospect who wants to deploy VM-Series firewalls in an Amazon Web Services (AWS) environment?

• Resources are shared within the cluster.
• Only active-passive high availability (HA) is supported.
• High availability (HA) clusters are limited to fewer than 8 virtual appliances.
• Special AWS plugins are needed for load balancing.

When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network's gateway IP address?

• Floating IP address
• VRRP
• ARP load sharing
• HSRP

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

• Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall.
• Enable communication between Panorama and the NSX Manager.
• Register the VM-Series firewall as a service.
• Obtain the Amazon Machine Images (AMIs) from marketplace.

Which protocol is used for communicating between VM-Series firewalls and a gateway load balancer in Amazon Web Services (AWS)?

• Geneve
• VRLAN
• VMLAN
• GRE

What is a benefit of network runtime security?

• It removes vulnerabilities that have been baked into containers.
• It more narrowly focuses on one security area and requires careful customization, integration, and maintenance.
• It is siloed to enhance workload security.
• It identifies unknown vulnerabilities that cannot be identified by known Common Vulnerability and Exposure (CVE) lists.

How does Prisma Cloud Compute offer workload security at runtime?

• It quarantines containers that demonstrate increased CPU and memory usage.
• It automatically patches vulnerabilities and compliance issues for every container and service.
• It works with the identity provider (IdP) to identify overprivileged containers and services, and it restricts network access.
• It automatically builds an allow-list security model for every container and service.

Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

• NVGRE support for advanced VLAN integration
• Full set of APIs enabling programmatic control of policy and configuration
• VXLAN support for network-layer abstraction
• Dynamic Address Groups to adapt Security policies dynamically

Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?

• HA-Series
• VM-Series
• PA-Series
• CN-Series