Online Access Free PCSFE Exam Questions

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

• A.Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).
• B.Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.
• C.Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.
• D.Edit the IP address of all of the affected VMs. www*

With which two private cloud environments does Palo Alto Networks have deep integrations? (Choose two.)

• A.Cisco ACI
• B.VMware NSX-T
• C.Nutanix
• D.Dell APEX

What must be enabled when using Terraform templates with a Cloud next-generation firewall (NGFW) for Amazon Web Services (AWS)?

• A.AWS Firewall Manager console access
• B.AWS CloudWatch logging
• C.Access to the Cloud NGFW for AWS console
• D.Access to the Palo Alto Networks Customer Support Portal

What helps avoid split brain in active-passive high availability (HA) pair deployment?

• A.Using a standard traffic interface as the HA3 link
• B.Enabling preemption on both firewalls in the HA pair
• C.Using a standard traffic interface as the HA2 backup
• D.Using the management interface as the HA1 backup link

A CN-Series firewall can secure traffic between which elements?

• A.Containers
• B.IPods
• C.Host containers
• D.Source applications