PCSFE Exam Questions

Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

Which component scans for threats in allowed traffic?

Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group re...

How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?

Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?

Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?

Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)

Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazo...

What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments with network security delivered as a managed cloud service?

What do tags allow a VM-Series firewall to do in a virtual environment?

Which two methods of Zero Trust implementation can benefit an organization? (Choose two.)

Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)

What are two environments supported by the CN-Series firewall? (Choose two.)

Why are VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster problematic for protecting containerized workloads?

What is a benefit of network runtime security?

What is a design consideration for a prospect who wants to deploy VM-Series firewalls in an Amazon Web Services (AWS) environment?

Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)

When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network's gateway...

Which two design options address split brain when configuring high availability (HA)? (Choose two.)

Where do CN-Series devices obtain a VM-Series authorization key?

Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?

Which Palo Alto Networks firewall provides network security when deploying a microservices- based application?

What is the appropriate file format for Kubernetes applications?

Which offering inspects encrypted outbound traffic?

Which two features of CN-Series firewalls protect east-west traffic between pods in different trust zones? (Choose two.)

Which component can provide application-based segmentation and prevent lateral threat movement?

What does the number of required flex credits for a VM-Series firewall depend on?

Which element protects and hides an internal network in an outbound flow?

Which software firewall would help a prospect interested in securing an environment with Kubernetes?

Which two valid components are used in installation of a VM-Series firewall in an OpenStack environment? (Choose two.)

Which software firewall would assist a prospect who is interested in securing extensive DevOps deployments?

How does a CN-Series firewall prevent exfiltration?

What helps avoid split brain in active-passive high availability (HA) pair deployment?

What must be enabled when using Terraform templates with a Cloud next-generation firewall (NGFW) for Amazon Web Services (AWS)?

How does Prisma Cloud Compute offer workload security at runtime?

What can be implemented in a CN-Series to protect communications between Dockers?

Which two public cloud platforms does the VM-Series plugin support? (Choose two.)

With which two private cloud environments does Palo Alto Networks have deep integrations? (Choose two.)

Why are containers uniquely suitable for runtime security based on allow lists?

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

How are Palo Alto Networks Next-Generation Firewalls (NGFWs) deployed within a Cisco ACI architecture?

What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestration?

Which service, when enabled, provides inbound traffic protection?

Which two configuration options does Palo Alto Networks recommend for outbound high availability (HA) design in Amazon Web Services using a VM-Series firewall? (Choose two.)

Which two criteria are required to deploy VM-Series firewalls in high availability (HA)? (Choose two.)

What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?

Which type of group allows sharing cloud-learned tags with on-premises firewalls?

What needs to be configured to deploy VM-Series firewalls in Azure as an Active/Active High Availability (HA) pair?

Organizations using multiple public and private cloud platforms can deploy and configure the VM- Series using which three toolsets? (Choose three.)