Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources from malware and lateral movement? (Choose two.)
AIntelligent Traffic Offload
BThreat Prevention
CWildFire
DSD-WAN
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)
AHeartbeat polling
BPing monitoring
CSession polling
DLink monitoring
Which technology allows for granular control of east-west traffic in a software-defined network?
ARouting
BMicrosegmentation
CMAC Access Control List
DVirtualization
Which solution is best for securing an EKS environment?
AVM-Series single host
BCN-Series high availability (HA) pair
CPA-Series using load sharing
DAPI orchestration
Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)
ACreating a license
BRenewing a license
CRegistering an authorization code
DDownloading a content update
Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?
AAdvanced URL Filtering (AURLF)
BCortex Data Lake
CDNS Security
DPanorama VM-Series plugin
How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?
AIt must be deployed as a member of a device cluster.
BIt must use a Layer 3 underlay network.
CIt must receive all forwarding lookups from the network controller.
DIt must be identified as a default gateway.
Which software firewall would help a prospect interested in securing an environment with Kubernetes?
AKN-Series
BML-Series
CVM-Series
DCN-Series
A CN-Series firewall can secure traffic between which elements?
AHost containers
BSource applications
CContainers
DPods
Which two statements apply to the VM-Series plugin? (Choose two.)
AIt can manage capabilities common to both VM-Series firewalls and hardware firewalls.
BIt can be upgraded independently of PAN-OS.
CIt enables management of cloud-specific interactions between VM-Series firewalls and supported public cloud platforms.
DIt can manage Panorama plugins.
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?
AHA-Series
BCN-Series
CPA-Series
DVM-Series
What do tags allow a VM-Series firewall to do in a virtual environment?
AEnable machine learning (ML).
BAdapt Security policy rules dynamically.
CIntegrate with security information and event management (SIEM) solutions.
DProvide adaptive reporting.
Which two public cloud platforms does the VM-Series plugin support? (Choose two.)
AAzure
BIBM Cloud
CAmazon Web Services (AWS)
DOCI
What is the structure of the YAML Ain't Markup Language (YAML) file repository?
ADeployment_Type/Kubernetes/Environment
BKubernetes/Deployment_Type/Environment
CKubernetes/Environment/Deployment_Type
DEnvironment/Kubernetes/Deployment_Type
Which two community-supported Palo Alto Networks templates will protect cloud workloads by using a CN-Series firewall on GKE? (Choose two.)
AMarketplace
BAnsible
CHelm
DTerraform
Which two licensing options provide the application visibility and control feature in a VM-Series deployment? (Choose two.)
APalo Alto Networks Cloud Storage
BPAYG
CBYOL
DAWS Marketplace
The Cloud NGFW for AWS can capture and save which three types of logs? (Choose three.)
AThreat
BWildFire submissions
CDecryption
DURL Filtering
ETraffic
Which tool or actions should users employ to estimate the amount of flex credits for VM-Series and CN-Series deployment?
ACloud NGFW for AWS Pricing Estimator
BOpen up a support case
CSoftware NGFW Flex Credits Calculator
DSoftware NGFW Credit Estimator
Which path should be followed to set up K8s cluster monitoring?
APanorama > Plugins > General > Kubernetes > Setup
BPanorama > Plugins > Kubernetes > Setup > General
CPanorama > Plugins > Kubernetes > General > Setup
DPanorama > Plugins > Setup > Kubernetes > General
A user must be assigned one of which two roles in order to create local rulestacks in the Cloud NGFW for AWS tenant? (Choose two.)
ALocalRuleStackAdmin
BFirewallRulestackAdmin
CGlobalRulestackAdmin
DGlobalFirewallAdmin
What are three attributes monitored by the Panorama AWS plugin? (Choose three.)
APrivate DNS name
BSubnet ID
CIAM instance profile
DVPC ID
EPublic DNS name
A system engineer managing a deployment of CN-Series with Panorama (software version 11.0) installs the Kubernetes Plugin. When the installation is complete, templates are present. What are the names of two of these templates and for what are they used? (Choose two.)
AK8S-Network-Setup used for daemonset
BK8S-Network-Setup-V2 used for Kubernetes as a service deployment
CK8S-Network-Setup-V3 used for Kubernetes as a service deployment
DK8S-Network-Setup-V3 used for CNF daemonset
Which two components are required for Intelligent Traffic Offload (ITO) on a VM-Series firewall? (Choose two.)
APAN-OS 10.1 or later
BVM-Series plugin 2.1.0 or later
CVM-Series plugin 3.1.0 or later
DPAN-OS 9.1 or later
How does Prisma Cloud Compute offer workload security at runtime?
AIt automatically builds an allow-list security model for every container and service.
BIt quarantines containers that demonstrate increased CPU and memory usage.
CIt automatically patches vulnerabilities and compliance issues for every container and service.
DIt works with the identity provider (IdP) to identify overprivileged containers and services, and it restricts network access.
Which port / interface must be assigned as the HA2 link when deploying VM-Series firewalls in High Availability (HA) on Amazon Web Services (AWS)?
Preview
