PCSFE exam

Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?A . Boundary automationB . Hypervisor integrationC . BootstrappingD . Dynamic Address GroupView AnswerAnswer: D Explanation: Dynamic Address Group is the PAN-OS feature that allows for automated updates to address...

Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources from malware and lateral movement? (Choose two.)A . Intelligent Traffic OffloadB . Threat PreventionC . WildFireD . SD-WANView AnswerAnswer: B, C Explanation: Threat Prevention...

Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)A . Decreased likelihood of data breachB . Reduced operational expendituresC . Reduced time to deployD . Reduced insurance premiumsView AnswerAnswer: A, C Explanation: The two factors that lead...

A CN-Series firewall can secure traffic between which elements?A . Host containersB . Source applicationsC . ContainersD . IPodsView AnswerAnswer: C Explanation: Containers are the elements that a CN-Series firewall can secure traffic between. Containers are isolated units of software that run on a shared operating system and have their...

Which technology allows for granular control of east-west traffic in a software-defined network?A . RoutingB . MicroseqmentationC . MAC Access Control ListD . VirtualizationView AnswerAnswer: B Explanation: Microsegmentation is a technology that allows for granular control of east-west traffic in a software-defined network. Microsegmentation divides the network into smaller segments...

What can software next-generation firewall (NGFW) credits be used to provision?A . Remote browser isolationB . Virtual Panorama appliancesC . Migrating NGFWs from hardware to VMsD . Enablement of DNS securityView AnswerAnswer: C Explanation: Software next-generation firewall (NGFW) credits can be used to provision migrating NGFWs from hardware to VMs....

Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)A . Prism CentralB . BootstrapC . Service ClusterD . Host-basedView AnswerAnswer: B, C Explanation: The two deployment modes of VM-Series firewalls that are supported across NSX-T are: Bootstrap Service Cluster NSX-T is a software-defined network (SDN) solution...

Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?A . Advanced URL Filtering (AURLF)B . Cortex Data LakeC . DNS SecurityD . Panorama VM-Series pluginView AnswerAnswer: C Explanation: DNS Security is the feature that provides real-time analysis using machine learning (ML) to defend...

Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?A . Content-IDB . External dynamic listC . App-IDD . Dynamic address groupView AnswerAnswer: D Explanation: Dynamic address group is the component that allows the flexibility to add network resources but...

How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?A . By using contracts between endpoint groups that send traffic to the firewall using a shared policyB . Through a virtual machine (VM) monitor domainC . Through a policy-based redirectD . By creating an access policyView...