QUESTION 32
Which two features of CN-Series firewalls protect east-west traffic between pods in different trust zones? (Choose two.)

QUESTION 33
What must be enabled when using Terraform templates with a Cloud next-generation firewall (NGFW) for Amazon Web Services (AWS)?

QUESTION 34
A CN-Series firewall can secure traffic between which elements?

QUESTION 35
Which two routing options are supported by VM-Series? (Choose two.)

QUESTION 36
When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network’s gateway IP address?

QUESTION 37
How does a CN-Series firewall prevent exfiltration?

QUESTION 38
What are two requirements for automating service deployment of a VM-Series firewall from an NSX Manager? (Choose two.)

QUESTION 39
Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?

QUESTION 40
How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?

QUESTION 41
What are two environments supported by the CN-Series firewall? (Choose two.)

QUESTION 42
What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestration?

QUESTION 43
Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?

QUESTION 44
What is a benefit of network runtime security?

QUESTION 45
A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

QUESTION 46
What is the appropriate file format for Kubernetes applications?

QUESTION 47
Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)

QUESTION 48
Where do CN-Series devices obtain a VM-Series authorization key?

QUESTION 49
How are CN-Series firewalls licensed?

QUESTION 50
Which two criteria are required to deploy VM-Series firewalls in high availability (HA)? (Choose two.)

QUESTION 51
With which two private cloud environments does Palo Alto Networks have deep integrations? (Choose two.)

QUESTION 52
Which protocol is used for communicating between VM-Series firewalls and a gateway load balancer in Amazon Web Services (AWS)?

QUESTION 53
Which type of group allows sharing cloud-learned tags with on-premises firewalls?

QUESTION 54
How does Prisma Cloud Compute offer workload security at runtime?

QUESTION 55
Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?