Palo Alto Networks Systems Engineer Professional - Software Firewall Sample Questions:
1. Which method fully automates the initial deployment, configuration, licensing, and threat content download when setting up a new VM-Series firewall?
A) Use Panorama to push device groups and template stack configurations to the new VM-Series firewall.
B) Deploy a complete bootstrap package by using an ISO image, block storage, or a storage bucket.
C) Connect the VM-Series firewall to Panorama and push the configuration package by using the bootstrap plugin.
D) Register the VM-Series firewall and launch the Day 1 Configuration Wizard.
2. What are three valid methods that use firewall flex credits to activate VM-Series firewall licenses by specifying authcode? (Choose three.)
A) Panorama device group in Panorama SW Licensing Plugin
B) authcodes= key value pair of Azure Vault configuration
C) /config/bootstrap.xml file of complete bootstrapping package
D) authcodes= key value pair of basic bootstrapping configuration
E) /license/authcodes file of complete bootstrap package
3. Which element protects and hides an internal network in an outbound flow?
A) DNS sinkholing
B) NAT
C) User-ID
D) App-ID
4. Which three tools are available to customers to facilitate the simplified and/or best-practice configuration of Palo Alto Networks Next-Generation Firewalls (NGFWs)? (Choose three.)
A) Best Practice Assessment (BPA) in Strata Cloud Manager (SCM)
B) Policy Optimizer to help identify and recommend Layer 7 policy changes
C) Day 1 Configuration through the customer support portal (CSP)
D) Telemetry to ensure that Palo Alto Networks has full visibility into the firewall configuration
E) Expedition to enable the creation of custom threat signatures
5. What three benefits does flex licensing for VM-Series firewalls offer? (Choose three.)
A) Licensing Strata Cloud Manager, Panorama with Dedicated Log Collectors, and CDSS per deployment profile
B) Licensing additional memory resources to increase session capacity
C) Vertically scaling the number of licensed cores in an existing fixed deployment profile
D) Moving credits between public and private cloud VM-Series firewall deployments
E) Using a pool of credits for both CN-Series firewall and VM-Series firewall deployment profiles
Solutions:
Question # 1 Answer: B | Question # 2 Answer: C,D,E | Question # 3 Answer: B | Question # 4 Answer: A,B,C | Question # 5 Answer: C,D,E |