Online Access Free PSE-SoftwareFirewall Practice Test

Why are containers uniquely suitable for runtime security based on allow lists?

• A.Operations teams know which processes are used within a container.
• B.Developers define the processes used in containers within the Dockerfile.
• C.Docker has a built-in runtime analysis capability to aid in allow listing.
• D.Containers have only a few defined processes that should ever be executed.

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

• A.Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.
• B.Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).
• C.Edit the IP address of all of the affected VMs.
• D.Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.

What must be enabled when using Terraform templates with a Cloud next-generation firewall (NGFW) for Amazon Web Services (AWS)?

• A.AWS CloudWatch logging
• B.Access to the Cloud NGFW for AWS console
• C.Access to the Palo Alto Networks Customer Support Portal
• D.AWS Firewall Manager console access

Which two configuration options does Palo Alto Networks recommend for outbound high availability (HA) design in Amazon Web Services using a VM-Series firewall? (Choose two.)

• A.Traditional active-active HA
• B.Transit VPC and Security VPC
• C.Transit gateway and Security VPC
• D.Traditional active-passive HA

Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?

• A.WildFire
• B.Advanced URL Filtering (AURLF)
• C.Secure Sockets Layer (SSL) Inbound Inspection
• D.OCSP