Palo Alto Networks PCSFE - Palo Alto Networks Certified Software Firewall Engineer Exam
Page: 1 / 25
Total 125 questions
Question #1 (Topic: Exam A)
Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources from malware and lateral movement? (Choose two.)
A. Intelligent Traffic Offload
B. Threat Prevention
C. WildFire
D. SD-WAN
Answer: BC
Question #2 (Topic: Exam A)
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)
A. Heartbeat polling
B. Ping monitoring
C. Session polling
D. Link monitoring
Answer: AD
Question #3 (Topic: Exam A)
Which technology allows for granular control of east-west traffic in a software-defined network?
A. Routing
B. Microsegmentation
C. MAC Access Control List
D. Virtualization
Answer: B
Question #4 (Topic: Exam A)
Which solution is best for securing an EKS environment?
A. VM-Series single host
B. CN-Series high availability (HA) pair
C. PA-Series using load sharing
D. API orchestration
Answer: B
Question #5 (Topic: Exam A)
A CN-Series firewall can secure traffic between which elements?
A. Host containers
B. Source applications
C. Containers
D. Pods
Answer: D
