EMT Practice Test

1. Question Content...

---

Question1: Which technology allows for granular control of east-west traffic in a software-defined network?

Question2: Regarding network segmentation, which two steps are involved in the configuration of a default route to an internet router? (Choose two.)

Question3: How does Prisma Cloud Compute offer workload security at runtime?

Question4: Which two design options address split brain when configuring high availability (HA)? (Choose two.)

Question5: Which type of group allows sharing cloud-learned tags with on-premises firewalls?

Question6: What can software next-generation firewall (NGFW) credits be used to provision?

Question7: What is a design consideration for a prospect who wants to deploy VM-Series firewalls in an Amazon Web Services (AWS) environment?

Question8: Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

Question9: Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources from malware and lateral movement? (Choose two.)

Question10: Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)

Question11: Which solution is best for securing an EKS environment?

Question12: Which offering inspects encrypted outbound traffic?

Question13: Why are VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster problematic for protecting containerized workloads?

Question14: Which component can provide application-based segmentation and prevent lateral threat movement?

Question15: Which two statements apply to the VM-Series plugin? (Choose two.)

Question16: Which offering inspects encrypted outbound traffic?

Question17: Why are containers uniquely suitable for runtime security based on allow lists?

Question18: Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)

Question19: What is the appropriate file format for Kubernetes applications?

Question20: How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

Question21: What does the number of required flex credits for a VM-Series firewall depend on?

Question22: Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)

Question23: Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)

Question24: Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)

Question25: What helps avoid split brain in active-passive high availability (HA) pair deployment?

Question26: How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?

Question27: When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network's gateway IP address?