Q25. How does Prisma Cloud Compute offer workload security at runtime?

Q26. Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)

Q27. A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

Q28. Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?

Q29. Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)

Q30. Why are containers uniquely suitable for runtime security based on allow lists?

Q31. Which two methods of Zero Trust implementation can benefit an organization? (Choose two.)

Q32. When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network’s gateway IP address?

Q33. Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)

Q34. Which component can provide application-based segmentation and prevent lateral threat movement?

Q35. What do tags allow a VM-Series firewall to do in a virtual environment?

Q36. Which two valid components are used in installation of a VM-Series firewall in an OpenStack environment?
(Choose two.)

Q37. How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

Q38. With which two private cloud environments does Palo Alto Networks have deep integrations? (Choose two.)

Q39. Which offering inspects encrypted outbound traffic?

Q40. What does the number of required flex credits for a VM-Series firewall depend on?

Q41. Which component scans for threats in allowed traffic?

Q42. Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)

Q43. Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

Q44. Which Palo Alto Networks firewall provides network security when deploying a microservices-based application?

Q45. A CN-Series firewall can secure traffic between which elements?

Q46. Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?

Q47. How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?