- All Exams Instant Download
How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?
How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?A . By using contracts between endpoint groups that send traffic to the firewall using a shared policyB . Through a virtual machine (VM) monitor domainC . Through a policy-based redirect (PBR)D . By creating an access...
Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)
Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)A . Security group assignment of virtual machines (VMs)B . Security groupsC . Steering rulesD . User IP mappingsE . Multiple authorization codesView AnswerAnswer: ABC
Which protocol is used for communicating between VM-Series firewall s and a gateway load balancer in Amazon Web Services (AWS)?
Which protocol is used for communicating between VM-Series firewall s and a gateway load balancer in Amazon Web Services (AWS)?A . VRLANB . GeneveC . GRED . VMLANView AnswerAnswer: B
Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewall s (NGFWs)? (Choose two.)
Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewall s (NGFWs)? (Choose two.)A . Decreased likelihood of data breachB . Reduced operational expendituresC . Reduced time to deployD . Reduced insurance premiumsView AnswerAnswer: AC
Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)
Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)A . Full set of APIs enabling programmatic control of policy and configurationB . VXLAN support for network-layer abstractionC . Dynamic Address Groups to adapt Security policies dynamicallyD . NVGRE support...
What helps avoid split brain in active-passive high availability (HA) pair deployment?
What helps avoid split brain in active-passive high availability (HA) pair deployment?A . Using a standard traffic interface as the HA2 backupB . Enabling preemption on both firewall s in the HA pairC . Using the management interface as the HA1 backup linkD . Using a standard traffic interface as...
What can software next-generation firewall (NGFW) credits be used to provision?
What can software next-generation firewall (NGFW) credits be used to provision?A . Remote browser isolationB . Virtual Panorama appliancesC . Migrating NGFWs from hardware to VMsD . Enablement of DNS securityView AnswerAnswer: B
Where do CN-Series devices obtain a VM-Series authorization key?
Where do CN-Series devices obtain a VM-Series authorization key?A . PanoramaB . Local installationC . GitHubD . Customer Support PortalView AnswerAnswer: A
What are two environments supported by the CN-Series firewall ? (Choose two.)
What are two environments supported by the CN-Series firewall ? (Choose two.)A . Positive KB . OpenShiftC . OpenStackD . Native K8View AnswerAnswer: BD
What is a design consideration for a prospect who wants to deploy VM-Series firewall s in an Amazon Web Services (AWS) environment?
What is a design consideration for a prospect who wants to deploy VM-Series firewall s in an Amazon Web Services (AWS) environment?A . Special AWS plugins are needed for load balancing.B . Resources are shared within the cluster.C . Only active-passive high availability (HA) is supported.D . High availability (HA)...
