Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional

Question 1

What is the structure of the YAML Ain't Markup Language (YAML) file repository?

A. Kubernetes/Deployment_Type/Environment

B. Deployment_Type/Kubernetes/Environment

C. Kubernetes/Environment/Deployment_Type

D. Environment/Kubernetes/Deployment_Type

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

What are two requirements for automating service deployment of a VM-Series firewall from an NSX Manager? (Choose two.)

A. Panorama can establish communications to the public Palo Alto Networks update servers.

B. The deployed VM-Series firewall can establish communications with Panorama.

C. Panorama has been configured to recognize both the NSX Manager and vCenter.

D. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls.

Correct Answer: B,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which two design options address split brain when configuring high availability (HA)? (Choose two.)

A. Using the heartbeat backup

B. Bundling multiple interfaces in an aggregated interface group and assigning HA2

C. Sending heartbeats across the HA2 interfaces

D. Adding a backup HA1 interface

Correct Answer: A,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which two methods of Zero Trust implementation can benefit an organization? (Choose two.)

A. Compliance is validated.

B. Security automation is seamlessly integrated.

C. Boundaries are established.

D. Access controls are enforced.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)

A. Heartbeat polling

B. Session polling

C. Ping monitoring

D. Link monitoring

Correct Answer: C,D

Question 6

When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network's gateway IP address?

A. ARP load sharing

B. HSRP

C. Floating IP address

D. VRRP

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)

A. Prism Central

B. Service Cluster

C. Bootstrap

D. Host-based

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional - PSE-SoftwareFirewall Exam Practice Test

Latest Update

Useful Links

Contact Us