PCSFE by Palo Alto Networks Actual Free Exam Q&As

Question 1

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

A. Obtain the Amazon Machine Images (AMIs) from marketplace. B. Enable communication between Panorama and the NSX Manager. C. Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall. D. Register the VM-Series firewall as a service.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Which component can provide application-based segmentation and prevent lateral threat movement?

A. App-ID B. NAT C. DNS Security D. URL Filtering

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?

A. It ensures consistent security across the entire environment. B. It allows extension of Zero Trust Network Security to the most remote locations and smallest branches. C. It allows for automatic deployment, provisioning, and immediate policy enforcement without any manual intervention. D. It protects data center and internet gateway deployments.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network's gateway IP address?

A. HSRP B. Floating IP address C. VRRP D. ARP load sharing

Discussion 0

Correct Answer: B Vote an answer

Question 5

A CN-Series firewall can secure traffic between which elements?

A. Containers B. Host containers C. IPods D. Source applications

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?

A. It must be deployed as a member of a device cluster B. It must use a Layer 3 underlay network C. It must receive all forwarding lookups from the network controller D. It must be identified as a default gateway

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

What helps avoid split brain in active-passive high availability (HA) pair deployment?

A. Using a standard traffic interface as the HA3 link B. Enabling preemption on both firewalls in the HA pair C. Using the management interface as the HA1 backup link D. Using a standard traffic interface as the HA2 backup

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Palo Alto Networks Certified Software Firewall Engineer - PCSFE Exam Practice Test