QUESTION: 13

What can software next-generation firewall (NGFW) credits be used to provision?

Enablement of DNS security
Virtual Panorama appliances
Remote browser isolation
Migrating NGFWs from hardware to VMs

Answer(s): A

Explanation:

Software next-generation firewall (NGFW) credits can be used to enable DNS security on Palo Alto Networks firewalls. These credits allow customers to activate DNS Security service, which provides real-time protection against DNS-based threats by leveraging machine learning and continuous analysis.

Reference:

Palo Alto Networks DNS Security: DNS Security
Palo Alto Networks Licensing Guide: Software NGFW Credits

Reveal Solution Next Question

QUESTION: 14

What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestration?

Client-ID
API Key
Dynamic Address Groups
Aperture orchestration engine

Answer(s): B

Explanation:

To integrate a Palo Alto Networks VM-Series firewall with Azure Orchestration, an API Key is required. The API Key is used to authenticate and authorize the firewall to interact with Azure services, enabling automated management and orchestration of security policies and configurations.

Reference:

Palo Alto Networks Integration with Azure: Azure Integration Azure API Management: Azure API Key

Reveal Solution Next Question

QUESTION: 15

Regarding network segmentation, which two steps are involved in the configuration of a default route to an internet router? (Choose two.)

Select the Static Routes tab, then click Add.
Select the Config tab, then select New Route from the Security Zone Route drop-down menu.
Select Network > Interfaces.
Select Network > Virtual Router, then select the default link to open the Virtual Router dialog.

Answer(s): A,D

Explanation:

To configure a default route to an internet router, you need to perform the following steps:
Select Network > Virtual Router, then select the default link to open the Virtual Router dialog. Select the Static Routes tab, then click Add to create a new static route. These steps ensure that the default route is correctly added to the virtual router configuration, allowing traffic to be directed to the appropriate internet gateway.

Reference:

Palo Alto Networks Configuration Guide: Configuring Default Route Palo Alto Networks Virtual Router Configuration: Virtual Router

Reveal Solution Next Question

QUESTION: 16

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall.
Enable communication between Panorama and the NSX Manager.
Register the VM-Series firewall as a service.
Obtain the Amazon Machine Images (AMIs) from marketplace.

Answer(s): B,C

Explanation:

This step involves setting up a connection between Panorama (the centralized management platform for Palo Alto Networks firewalls) and the VMware NSX Manager. This communication is essential for managing and orchestrating the VM-Series firewalls within the NSX environment.

Reference:

The integration guide for VMware NSX with VM-Series firewalls details the process of enabling communication between Panorama and NSX Manager.
Palo Alto Networks VMware NSX Integration Guide
Register the VM-Series firewall as a service:

Registering the VM-Series firewall as a service in the NSX Manager is crucial for the firewall to be recognized and managed within the NSX environment. This step allows the firewall to be deployed and configured as part of the NSX service chaining.

The VMware NSX integration documentation specifies the requirement to register the VM-Series firewall as a service.
Palo Alto Networks VMware NSX Integration Guide

Reveal Solution Next Question

Free PSE-SoftwareFirewall Exam Braindumps (page: 4)

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Explanation:

Reference:

QUESTION: 16

Explanation:

Reference: