Palo Alto Networks PSE-SWFW-Pro-24 Palo Alto Networks Systems Engineer Professional - Software Firewall Exam Exam Practice Test Questions

• Question 1

  Which three tools are available to customers to facilitate the simplified and/or best-practice configuration of Palo Alto Networks Next-Generation Firewalls (NGFWs)? (Choose three.)

  • Telemetry to ensure that Palo Alto Networks has full visibility into the firewall configuration
  • Day 1 Configuration through the customer support portal (CSP)
  • Policy Optimizer to help identify and recommend Layer 7 policy changes
  • Expedition to enable the creation of custom threat signatures
  • Best Practice Assessment (BPA) in Strata Cloud Manager (SCM)

  Show Answer Answer: C,D,E Next

• Question 2

  Which three statements describe the functionality of a Dynamic Address Group in Security policy? (Choose three.)

  • Its update requires "Commit" to enforce membership mapping.
  • It allows creation and enforcement of consistent Security policy across multiple cloud environments.
  • Tags cannot be defined statically on the firewall.
  • It uses tags as filtering criteria to determine IP address mapping to a group.
  • Its maximum number of registered IP addresses is dependent on the firewall platform.

  Show Answer Answer: B, ,D, ,E Next

• Question 3

  CN-Series firewalls offer threat protection for which three use cases? (Choose three.)

  • Prevention of sensitive data exfiltration from Kubernetes environments
  • All Kubernetes workloads in the public and private cloud
  • Inbound, outbound, and east-west traffic between containers
  • All workloads deployed on-premises or in the public cloud
  • Enforcement of segmentation policies that prevent lateral movement of threats

  Show Answer Answer: A, ,C, ,E Next

• Question 4

  A company has used software NGFW credits to deploy several VM-Series firewalls with Advanced URL Filtering in the company's deployment profiles. The IT department has determined that the firewalls no longer need the Advanced URL Filtering license.How can this license be removed from the hosts?

  • Edit the current deployment profile to remove the Advanced URL Filtering license.
  • On the firewall, issue this command: > delete url subscription license.
  • Add a new deployment profile with all the licenses selected except Advanced URL Filtering.
  • Delete the current deployment profile from the cloud service provider.

  Show Answer Answer: A Next

• Question 5

  What are two benefits of credit-based flexible licensing for software firewalls? (Choose two.)

  • Create virtual Panoramas.
  • Add Cloud-Delivered Security Services (CDSS) subscriptions to CN-Series firewalls.
  • Create Cloud NGFWs.
  • Add Cloud-Delivered Security Services (CDSS) subscriptions to PA-Series firewalls.

  Show Answer Answer: B, ,C Next