PCSFE Exam Questions

Which software firewall is suitable for deployment across multiple cloud service providers and secure lift-and-shift applications?

Intelligent Traffic Offload (ITO) requires a firewall be deployed in which mode?

Which service enables a firewall or Panorama to download App-IDs for unknown SaaS applications from the cloud?

What are three valid deployment options for Panorama in Amazon Web Services (AWS)? (Choose three.)

In order to calculate the total number of Software NGFW Credits for an upcoming virtualization project in ESXi, which two pieces of information are needed? (Choose two.)

Considering the following information, what are two paths an engineer can follow to implement route tagging with 32-bit decimal notation on existing software firewalls? (Choose two...

After how many days does a daily warning message start appearing within the system before a Palo Alto Networks VM-Series license expires?

Which three traffic flows can protect against zero-day attacks? (Choose three.)

Which deployment method should be used by an Azure administrator to deploy a VM-Series firewall to extend a physical data center / private cloud into Azure using IPSec or ExpressRo...

Application visibility and control in a secured environment can:

Which type of logs can Cloud NGFW for AWS forward?

Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources fr...

Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)

Which technology allows for granular control of east-west traffic in a software-defined network?

Which solution is best for securing an EKS environment?

A CN-Series firewall can secure traffic between which elements?

Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?

As which file type will Cloud NGFW for AWS logs forwarded to an AWS S3 bucket be saved?

In VM-Series firewall deployment, which of the following are essential to verify?

Which command is used to set up the cluster for CN-Series firewall HSF deployment and to prepare the extend permissions for the service account?

In troubleshooting Cloud NGFW in GCP, which aspects are crucial to check?

What is the structure of the YAML Ain't Markup Language (YAML) file repository?

Which feature must be configured in an NSX environment to ensure proper operation of a VM- Series firewall in order to secure east-west traffic?

Which two routing options are supported by VM-Series? (Choose two.)

What are two requirements for automating service deployment of a VM-Series firewall from an NSX Manager? (Choose two.)

How are CN-Series firewalls licensed?

Regarding network segmentation, which two steps are involved in the configuration of a default route to an internet router? (Choose two.)

What is the minimum number of dataplane interfaces created when the Google Cloud Platform (GCP) Marketplace deploys an instance of the VM-Series firewall?

What are two types of licensing subscription available from Palo Alto Networks? (Choose two.)

Which software firewall should be deployed when a customer wants to maintain control of the firewall that inspects both north-south traffic and east-west traffic in public cloud en...

Which of the following can provide application-level security for a web-server instance on Amazon Web Services (AWS)?

Which two statements apply to the VM-Series plugin? (Choose two.)

What can software next-generation firewall (NGFW) credits be used to provision?

How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

Which protocol is used for communicating between VM-Series firewalls and a gateway load balancer in Amazon Web Services (AWS)?