Question 1

Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?

Options :

A : Dynamic Address Group

B : Hypervisor integration

C : Bootstrapping

D : Boundary automation

Answer: A

Question 2

Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

Options :

A : NVGRE support for advanced VLAN integration

B : Full set of APIs enabling programmatic control of policy and configuration

C : VXLAN support for network-layer abstraction

D : Dynamic Address Groups to adapt Security policies dynamically

Answer: B,D

Question 3

How does Prisma Cloud Compute offer workload security at runtime?

Options :

A : It quarantines containers that demonstrate increased CPU and memory usage.

B : It automatically patches vulnerabilities and compliance issues for every container and service.

C :

It works with the identity provider (IdP) to identify overprivileged containers and services, and it restricts network access.

D : It automatically builds an allow-list security model for every container and service.

Answer: D

Question 4

Why are containers uniquely suitable for runtime security based on allow lists?

Options :

A : Containers have only a few defined processes that should ever be executed.

B : Docker has a built-in runtime analysis capability to aid in allow listing.

C : Operations teams know which processes are used within a container.

D : Developers define the processes used in containers within the Dockerfile.

Answer: A

Question 5

What are two requirements for automating service deployment of a VM-Series firewall from an NSX Manager? (Choose two.)

Options :

A : Panorama has been configured to recognize both the NSX Manager and vCenter.

B : vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls.

C : The deployed VM-Series firewall can establish communications with Panorama.

D : Panorama can establish communications to the public Palo Alto Networks update servers.

Answer: A,C

Higher Test Marks with Free Online PSE-SoftwareFirewall Exam Practice