PCSFE Practice Test

PCSFE Practice Test practice questions, page 4 of 5, with answer review and explanations.

Question 16

How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?

  1. It must be deployed as a member of a device cluster.
  2. It must use a Layer 3 underlay network.
  3. It must receive all forwarding lookups from the network controller.
  4. It must be identified as a default gateway.

Question 17

Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?

  1. Content-ID
  2. External dynamic list (EDL)
  3. App-ID
  4. Dynamic address group

Question 18

Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?

  1. Boundary automation
  2. Hypervisor integration
  3. Bootstrapping
  4. Dynamic Address Group

Question 19

Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)

  1. Decreased likelihood of data breach
  2. Reduced operational expenditures
  3. Reduced time to deploy
  4. Reduced insurance premiums

Question 20

Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?

  1. HA-Series
  2. CN-Series
  3. PA-Series
  4. VM-Series