Examen de práctica

QUESTION 11 Which three methods may be used to deploy CN-Series firewalls? (Choose three.)

• A. Terraform templates

• B. Panorama plugin for Kubernetes

• C. YAML file

• D. Helm charts

• E. Docker Swarm

QUESTION 17 Which three resources can help conduct planning and implementation of Palo Alto Networks NGFW solutions? (Choose three.)

• A. Technical assistance center (TAC)

• B. Partners / systems Integrators

• C. Professional services

• D. Proof of Concept Labs

• E. QuickStart services

QUESTION 23 Why should a customer use advanced versions of Cloud-Delivered Security Services (CDSS) subscriptions compared to legacy versions when creating or editing a deployment profile? (e.g., using Advanced Threat Prevention instead of Threat Prevention.)

• A. To improve firewall throughput by inspecting hashes of advanced packet headers

• B. To download and install new threat-related signature databases in real-time

• C. To use cloud-scale machine learning inline for detection of highly evasive and zero-day threats

• D. To use external dynamic lists for blocking known malicious threat sources and destinations

QUESTION 31 Tags can be created for which three objects? (Choose three.)

• A. Address groups

• B. Dynamic NAT objects

• C. External dynamic lists

• D. Address objects

• E. Service groups

QUESTION 14 Which two statements accurately describe cloud-native load balancing with Palo Alto Networks VMSeries firewalls and/or Cloud NGFW in public cloud environments? (Choose two.)

• A. Cloud NGFWs distributed architecture model requires deployment of a single centralized firewall and will force all traffic to the firewall across pre-built VPN tunnels.

• B. VM-Series firewall deployments in the public cloud will require the deployment of a cloud-native load balancer if high availability (HA) or redundancy is needed.

• C. Cloud NGFW in AWS or Azure has load balancing built into the underlying solution and does not require the deployment of a separate load balancer.

• D. VM-Series firewall load balancing is automated and is handled by the internal mechanics of the NGFW software without the need for a load balancer.

QUESTION 43 Why are VM-Series firewalls now grouped by four tiers?

• A. To obscure the supported hypervisor manufacturer into generic terms

• B. To simplify the portfolio and reduce the number of VM-Series models customers must choose from

• C. To define the maximum limits for key criteria based on allocated memory

• D. To define the priority level of support customers expect when opening a TAC case, from lowest tier 1 to highest tier 4

Which two deployment models does Cloud NGFW for AWS support? (Choose two.)

• A. Hierarchical

• B. Centralized

• C. Distributed

• D. Linear

QUESTION 18 A company wants to make its flexible-license VM-Series firewall, which runs on ESXi, process higher throughput. Which order of steps should be followed to minimize downtime?

• A. Increase the vCPU within the deployment profile. Retrieve or fetch license keys on the VM-Series NGFW. Power-off the VM and increase the vCPUs within the hypervisor. Power-on the VM-Series NGFW. Confirm the correct tier level and vCPU appear on the NGFW dashboard.

• B. Power-off the VM and increase the vCPUs within the hypervisor. Power-on the VM-Series NGFW. Retrieve or fetch license keys on the VM-Series NGFW. Increase the vCPU within the deployment profile. Confirm the correct tier level and vCPU appear on the NGFW dashboard.

• C. Power-off the VM and increase the vCPUs within the hypervisor. Increase the vCPU within the deployment profile. Retrieve or fetch license keys on the VM-Series NGFW. Confirm the correct tier level and vCPU appear on the NGFW dashboard. Power-on the VM-Series NGFW.

• D. Increase the vCPU within the deployment profile. Retrieve or fetch license keys on the VM-Series NGFW. Confirm the correct tier level and vCPU appear on the NGFW dashboard. Power-off the VM and increase the vCPUs within the hypervisor. Power-on the VM-Series NGFW.

QUESTION 5 When registering a software NGFW to the deployment profile without internet access (i.e., offline registration), what information must be provided in the customer support portal?

• A. Authcode and serial number of the VM-Series firewall

• B. Hypervisor installation ID and software version

• C. Number of data plane and management plane interfaces

• D. CPUID and UUID of the VM-Series firewall

QUESTION 16 A partner has successfully showcased and validated the efficacy of the Palo Alto Networks software firewall to a customer. Which two additional partner-delivered or Palo Alto Networks-delivered common options can the sales team offer to the customer before the sale is completed? (Choose two.)

• A. Hardware collection and recycling services by Palo Alto Networks or by an approved NextWave Partner for the customers existing firewall infrastructure

• B. Professional services delivered by Palo Alto Networks or by an approved Certified Professional Services Partner (CPSP) for deployment assistance or QuickStart

• C. Network encryption services (NES) delivered by an approved NES partner to ensure none of the data traversed is readable by third-party entities

• D. Managed services delivered by an approved Managed Security Services Program (MSSP) partner for dayto-day management of the environment