Free Palo Alto Networks PSE-SoftwareFirewall Exam Dumps Questions & Answers

How are CN-Series firewalls licensed?

• A.  Service-plane vCPU
• B.  Control-plane vCPU
• C.  Management-plane vCPU
• D.  Data-plane vCPU

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

• A.  Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.
• B.  Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).
• C.  Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.
• D.  Edit the IP address of all of the affected VMs.

What do tags allow a VM-Series firewall to do in a virtual environment?

• A.  Adapt Security policy rules dynamically.
• B.  Provide adaptive reporting.
• C.  Enable machine learning (ML).
• D.  Integrate with security information and event management (SIEM) solutions.

What can be implemented in a CN-Series to protect communications between Dockers?

• A.  Vulnerability management
• B.  Runtime security
• C.  Data loss prevention (DLP)
• D.  Firewalling

Which two criteria are required to deploy VM-Series firewalls in high availability (HA)? (Choose two.)

• A.  Assignment of identical licenses and subscriptions
• B.  Deployment on a different host
• C.  Deployment on same type of hypervisor
• D.  Configuration of asymmetric routing