Free Palo Alto Networks Systems Engineer Professional – Software Firewall Exam PSE-SWFW-Pro-24 Exam Practice Test

Which three statements describe the functionality of a Dynamic Address Group in Security policy? (Choose three.)

• Its update requires "Commit" to enforce membership mapping.
• It allows creation and enforcement of consistent Security policy across multiple cloud environments.
• Tags cannot be defined statically on the firewall.
• It uses tags as filtering criteria to determine IP address mapping to a group.
• Its maximum number of registered IP addresses is dependent on the firewall platform.

Which three statements describe restrictions or characteristics of Firewall flex credit profiles of a credit pool in the Palo Alto Networks customer support portal? (Choose three.)

• The number of licensed cores must match the number of provisioned CPU cores per instance.
• Allocate credits for use with Cloud NGFW for AWS and Azure.
• Each VM-Series firewall deployment profile is either fixed or flexible.
• All firewalls activated to a deployment profile will have the same Cloud-Delivered Security Services (CDSS).
• Each deployment profile is either CN-Series firewall or VM-Series firewall.

CN-Series firewalls offer threat protection for which three use cases? (Choose three.)

• Prevention of sensitive data exfiltration from Kubernetes environments
• All Kubernetes workloads in the public and private cloud
• Inbound, outbound, and east-west traffic between containers
• All workloads deployed on-premises or in the public cloud
• Enforcement of segmentation policies that prevent lateral movement of threats

When using VM-Series firewall bootstrapping, which three methods can be used to install licensed content, including antivirus, applications, and threats? (Choose three.)

• Panorama 10.2 or later to use the content auto push feature
• Complete bootstrapping and either Azure Blob storage or Amazon S3 bucket
• Content-Security-Policy update URL in the init-cfg.txt file
• Custom-AMI or Azure VM image, with content preloaded
• Panorama software licensing plugin

When registering a software NGFW to the deployment profile without internet access (i.e., ofline registration), what information must be provided in the customer support portal?

• Authcode and serial number of the VM-Series firewall
• Hypervisor installation ID and software version
• Number of data plane and management plane interfaces
• CPUID and UUID of the VM-Series firewall

Which three statements describe benefits of the memory scaling feature introduced in PAN-OS 10.2? (Choose three.)

• Increased maximum throughput with additional memory
• Increased maximum sessions with additional memory
• Increased maximum number of Dynamic Address Groups with additional memory
• Increased number of tags per IP address with additional memory
• Increased maximum security rule count with additional memory

Per reference architecture, which default PAN-OS configuration should be overridden to make VM- Series firewall deployments in the public cloud more secure?

• Intrazone-default rule action and logging
• Interzone-default rule service
• Interzone-default rule action and logging
• Intrazone-default rule service

Which two statements accurately describe cloud-native load balancing with Palo Alto Networks VM- Series firewalls and/or Cloud NGFW in public cloud environments? (Choose two.)Cloud NGFW’s distributed architecture model requires deployment of a single centralized firewall and will force all traffic to the firewall across pre-built VPN tunnels.VM-Series firewall deployments in the public cloud will require the deployment of a cloud-native load balancer if high availability (HA) or redundancy is needed.Cloud NGFW in AWS or Azure has load balancing built into the underlying solution and does not require the deployment of a separate load balancer.VM-Series firewall load balancing is automated and is handled by the internal mechanics of the NGFW software without the need for a load balancer.

• A cloud-native load balancer is essential for distributing traffic and ensuring redundancy.

What can a firewall use to automatically update Security policies with new IP address information for a virtual machine (VM) when it has moved from host-A to host-B because host-A is down or undergoing periodic maintenance?

• Dynamic Address Groups
• Dynamic User Groups
• Dynamic Host Groups
• Dynamic IP Groups

What three benefits does flex licensing for VM-Series firewalls offer? (Choose three.)

• Licensing additional memory resources to increase session capacity
• Licensing Strata Cloud Manager, Panorama with Dedicated Log Collectors, and CDSS per deployment profile
• Using a pool of credits for both CN-Series firewall and VM-Series firewall deployment profiles
• Moving credits between public and private cloud VM-Series firewall deployments
• Vertically scaling the number of licensed cores in an existing fixed deployment profile