PCSFE Exam Questions

A data center experiences a power outage that results in the reboot of all ESXi servers, including the software firewall's virtual machine (VM). Subsequently, there is a notable de...

Which type of Terraform code is commonly used to deploy infrastructure as code (IaC)?

With the Panorama plugin for VM-Series installed. Panorama can collect a predefined set of attributes from which services in Amazon Web Services (AWS) as tags and populate it in th...

Which two community-supported Palo Alto Networks templates will protect cloud workloads by using a CN-Series firewall on GKE? (Choose two.)

Which two licensing options provide the application visibility and control feature in a VM-Series deployment? (Choose two.)

A manager wants to enhance the performance of a Palo Alto Networks VM-Series firewall. How can the use of CLI increase the number of cores in the dataplane?

What is created by the Panorama plugin as part of the infrastructure setup in Amazon Web Services (AWS) cloud?

What is the valid command to setup the cluster for CN-series firewall HSF Deployment and to prepare the extend permissions for service account?

To list NGFW pods connected to a management plane, which Panorama CLI command should be used?

Which plugin is used to create and push device group-based policies to the Cloud NGFW?

Using what two commands can an engineer confirm that the installation of the CN-series firewall as a K8S service on the production GKE cluster was successful after it was protected...

When deploying a firewall in Amazon Web Services (AWS) utilizing the orchestration through Panorama, which plugin is required?

To get the current auth code applied to a CN-Series firewall, which Panorama CLI command should be used?

What are the three required ethernet interfaces to deploy the VM-Series in AWS as a centralized model? (Choose three.)

What is the minimum number of management interfaces created when the Google Cloud Platform (GCP) Marketplace deploys an instance of the VM-Series firewall?

What must be done in Panorama to enable the CN-MGMT to connect to Panorama?

What is the default log destination for S3 bucket in the Cloud NGFW CloudFormation template (CFT) that is launched to set up the tenant?

After configuring a new software VM-Series firewall, the network team cannot detect any traffic being transmitted or received on the correct VLAN of the network switch. However, th...

An engineer is setting up tags in Panorama, but it is not working. How can the engineer verify the issue while viewing the Amazon Web Services (AWS) plugin logs from the CLI?

What is the maximum number of vCPUs can software NGFW licensing support with NGFW flex licensing?

In the Cloud NGFW for Amazon Web Services (AWS) centralized inbound deployment architecture, what is the next hop for the traffic after it passes through the application load balan...

Which Cloud NGFW for AWS deployment method requires traffic to pass through an AWS Transit Gateway?

What ensures consistent policy across multiple Cloud NGFWs?

The Cloud NGFW for AWS can capture and save which three types of logs? (Choose three.)

To troubleshoot a missing or expired license for a CN-Series firewall, which Panorama CLI command should be used?

What is the correct sequence of events for offloading by the Intelligent Traffic Offload (ITO) service?

Which tool or actions should users employ to estimate the amount of flex credits for VM-Series and CN-Series deployment?

What does GlobalProtect gateway use to determine which resources a compliant device should be accessing and a non-compliant device should not be accessing?

Which path should be followed to set up K8s cluster monitoring?

What must be obtained to deploy a pay-as-you-go (PAYG) based VM-Series firewall in Amazon Web Services (AWS) through the marketplace?

What is the maximum number of Kubernetes clusters Panorama can support?

How many tokens are consumed for each vCPU used in a CN-Series firewall?

What are the two appropriate routing settings required to deploy software firewall integration with Amazon Web Service (AWS) GWLB? (Choose two.)

A user must be assigned one of which two roles in order to create local rulestacks in the Cloud NGFW for AWS tenant? (Choose two.)

Which deployment method should a GCP administrator use to deploy a VM-Series firewall to secure east-west traffic between Virtual Private Clouds (VPCs)?

What are three attributes monitored by the Panorama AWS plugin? (Choose three.)

In the Cloud NGFW for AWS distributed outbound architecture model, what is the first hop the traffic takes from the source?

Which port / interface must be assigned as the HA2 link when deploying VM-Series firewalls in High Availability (HA) on Amazon Web Services (AWS)?

A system engineer is working on the Proof of Concept (POC) for Cloud Next-Generation Firewall (NGFW) for Azure using an existing Panorama setup. However, connection with the Cloud...

Which type of protection flow approach would best fit a customer requirement for application visibility and control between cloud-based web server and database server?

A system engineer managing a deployment of CN-Series with Panorama (software version 11.0) installs the Kubernetes Plugin. When the installation is complete, templates are present....

Which two statements apply to the management Cloud NGFW by AWS firewall manager? (Choose two.)

In which area of the Customer Support Portal should a firewall administrator complete the steps to deactivate an accidentally deleted VM-Series firewall and free up Software NGFW C...

A cloud infrastructure architect wants to monitor NGFW in production running on Amazon Web Services (AWS). It is known that the software firewalls are able to publish native PAN-OS...

Which type of traffic should an Advanced URL Filtering (AURLF) security profile be applied to ensure that only approved URLs are accessed and to prevent unauthorized access to URLs...

Which two components are required for Intelligent Traffic Offload (ITO) on a VM-Series firewall? (Choose two.)

When using Ansible with PAN-OS, which type of connection method should be used?

To which service does the Cloud NGFW for Azure send its logs?

A Cloud Engineer is considering distributed models to support outbound and inbound traffic flows. Which of the traffic flows is are all supported by the distributed model?

Which automation tools should be used to create policies for Cloud NGFW for AWS?