PSE-SoftwareFirewall Practice Exam Questions and Answers

A.  

Threat Prevention

B.  

SD-WAN

C.  

Intelligent Traffic Offload

D.  

WildFire

A.  

Reduced operational expenditures

B.  

Decreased likelihood of data breach

C.  

Reduced insurance premiums

D.  

Reduced time to deploy

A.  

Select the Static Routes tab, then click Add.

B.  

Select the Config tab, then select New Route from the Security Zone Route drop-down menu.

C.  

Select Network > Interfaces.

D.  

Select Network > Virtual Router, then select the default link to open the Virtual Router dialog.

A.  

It quarantines containers that demonstrate increased CPU and memory usage.

B.  

It automatically patches vulnerabilities and compliance issues for every container and service.

C.  

It works with the identity provider (IdP) to identify overprivileged containers and services, and it restricts network access.

D.  

It automatically builds an allow-list security model for every container and service.

A.  

VM-Series

B.  

PA-Series

C.  

HA-Series

D.  

CN-Series

A.  

Panorama

B.  

Local installation

C.  

GitHub

D.  

Customer Support Portal

A.  

Resources are shared within the cluster.

B.  

Only active-passive high availability (HA) is supported.

C.  

High availability (HA) clusters are limited to fewer than 8 virtual appliances.

D.  

Special AWS plugins are needed for load balancing.

A.  

It can manage Panorama plugins.

B.  

It can be upgraded independently of PAN-OS.

C.  

It can manage capabilities common to both VM-Series firewalls and hardware firewalls.

D.  

It enables management of cloud-specific interactions between VM-Series firewalls and supported public cloud platforms.

A.  

Environment/Kubernetes/Deployment_Type

B.  

Kubernetes/Environment/Deployment_Type

C.  

Deployment_Type/Kubernetes/Environment

D.  

Kubernetes/Deployment_Type/Environment

A.  

It removes vulnerabilities that have been baked into containers.

B.  

It more narrowly focuses on one security area and requires careful customization, integration, and maintenance.

C.  

It is siloed to enhance workload security.

D.  

It identifies unknown vulnerabilities that cannot be identified by known Common Vulnerability and Exposure (CVE) lists.