PCSFE Exam Questions
135 real PCSFE exam questions with expert-verified answers and explanations. Page 1 of 3.
- Question #1
Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)
- Question #2
Which component scans for threats in allowed traffic?
- Question #3
Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)
- Question #4
A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group re...
- Question #5
How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?
- Question #6
Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?
- Question #7
Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?
- Question #8
Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)
- Question #9
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazo...
- Question #10
What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments with network security delivered as a managed cloud service?
- Question #11
What do tags allow a VM-Series firewall to do in a virtual environment?
- Question #12
Which two methods of Zero Trust implementation can benefit an organization? (Choose two.)
- Question #13
Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)
- Question #14
What are two environments supported by the CN-Series firewall? (Choose two.)
- Question #15
Why are VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster problematic for protecting containerized workloads?
- Question #16
What is a benefit of network runtime security?
- Question #17
What is a design consideration for a prospect who wants to deploy VM-Series firewalls in an Amazon Web Services (AWS) environment?
- Question #18
Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)
- Question #19
When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network's gateway...
- Question #20
Which two design options address split brain when configuring high availability (HA)? (Choose two.)
- Question #21
Where do CN-Series devices obtain a VM-Series authorization key?
- Question #22
Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?
- Question #23
Which Palo Alto Networks firewall provides network security when deploying a microservices- based application?
- Question #24
What is the appropriate file format for Kubernetes applications?
- Question #25
Which offering inspects encrypted outbound traffic?
- Question #26
Which two features of CN-Series firewalls protect east-west traffic between pods in different trust zones? (Choose two.)
- Question #27
Which component can provide application-based segmentation and prevent lateral threat movement?
- Question #28
What does the number of required flex credits for a VM-Series firewall depend on?
- Question #29
Which element protects and hides an internal network in an outbound flow?
- Question #30
Which software firewall would help a prospect interested in securing an environment with Kubernetes?
- Question #31
Which two valid components are used in installation of a VM-Series firewall in an OpenStack environment? (Choose two.)
- Question #32
Which software firewall would assist a prospect who is interested in securing extensive DevOps deployments?
- Question #33
How does a CN-Series firewall prevent exfiltration?
- Question #34
What helps avoid split brain in active-passive high availability (HA) pair deployment?
- Question #35
What must be enabled when using Terraform templates with a Cloud next-generation firewall (NGFW) for Amazon Web Services (AWS)?
- Question #36
How does Prisma Cloud Compute offer workload security at runtime?
- Question #37
What can be implemented in a CN-Series to protect communications between Dockers?
- Question #38
Which two public cloud platforms does the VM-Series plugin support? (Choose two.)
- Question #39
With which two private cloud environments does Palo Alto Networks have deep integrations? (Choose two.)
- Question #40
Why are containers uniquely suitable for runtime security based on allow lists?
- Question #41
Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)
- Question #42
How are Palo Alto Networks Next-Generation Firewalls (NGFWs) deployed within a Cisco ACI architecture?
- Question #43
What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestration?
- Question #44
Which service, when enabled, provides inbound traffic protection?
- Question #45
Which two configuration options does Palo Alto Networks recommend for outbound high availability (HA) design in Amazon Web Services using a VM-Series firewall? (Choose two.)
- Question #46
Which two criteria are required to deploy VM-Series firewalls in high availability (HA)? (Choose two.)
- Question #47
What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?
- Question #48
Which type of group allows sharing cloud-learned tags with on-premises firewalls?
- Question #49
What needs to be configured to deploy VM-Series firewalls in Azure as an Active/Active High Availability (HA) pair?
- Question #50
Organizations using multiple public and private cloud platforms can deploy and configure the VM- Series using which three toolsets? (Choose three.)