Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional (PSE-SoftwareFirewall) Free Practice Test

Question 1

What is a design consideration for a prospect who wants to deploy VM-Series firewalls in an Amazon Web Services (AWS) environment?

A. Special AWS plugins are needed for load balancing.

B. Resources are shared within the cluster.

C. Only active-passive high availability (HA) is supported.

D. High availability (HA) clusters are limited to fewer than 8 virtual appliances.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?

A. Content-ID

B. External dynamic list (EDL)

C. Dynamic address group

D. App-ID

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Why are containers uniquely suitable for runtime security based on allow lists?

A. Operations teams know which processes are used within a container.

B. Docker has a built-in runtime analysis capability to aid in allow listing.

C. Developers define the processes used in containers within the Dockerfile.

D. Containers have only a few defined processes that should ever be executed.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

A CN-Series firewall can secure traffic between which elements?

A. Host containers

B. Containers

C. Source applications

D. Pods

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which service, when enabled, provides inbound traffic protection?

A. Advanced URL Filtering (AURLF)

B. Data loss prevention (DLP)

C. DNS Security

D. Threat Prevention

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which technology allows for granular control of east-west traffic in a software-defined network?

A. Microsegmentation

B. MAC Access Control List

C. Routing

D. Virtualization

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)

A. Ping monitoring

B. Session polling

C. Link monitoring

D. Heartbeat polling

Correct Answer: A,C

Welcome to TestSimulate

Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional (PSE-SoftwareFirewall) Free Practice Test