Exam PSE-SWFW-Pro-24 Topic 1 Question 71 Discussion
Actual exam question for Palo Alto Networks's PSE-SWFW-Pro-24 exam
Question #: 71
Topic #: 1
Question #: 71
Topic #: 1
A systems engineer (SE) is informed by the primary contact at a bank of an unused balance of 15,000 software NGFW flexible credits the bank does not want to lose when they expire in 1.5 years. The SE is told that the bank's new risk and compliance officer is concerned that its operation is too permissive when allowing its servers to send traffic to SaaS vendors. Currently, its AWS and Azure VM-Series firewalls only use Advanced Threat Prevention.
What should the SE recommend to address the customer's concerns?
What should the SE recommend to address the customer's concerns?
Suggested Answer: C Vote an answer
The core issue is the customer's concern about overly permissive outbound traffic to SaaS vendors and the desire to utilize expiring software NGFW credits. The best approach is a structured, needs-based assessment before simply activating features. Option C directly addresses this.
Why C is correct: Verifying conformance to standards and regulations, assessing risk and criticality of workloads, and then aligning subscriptions to those needs is the most responsible and effective approach. This ensures the customer invests in the right security capabilities that address their specific concerns and compliance requirements, maximizing the value of their credits. This aligns with Palo Alto Networks best practices for security deployments, which emphasize a risk-based approach.
Why A, B, and D are incorrect:
A and D: Simply activating Advanced WildFire without understanding the customer's specific needs is not a strategic approach. Starting with the largest or smallest vCPU models is arbitrary and doesn't guarantee the best use of resources or the most effective security posture. It also doesn't directly address the SaaS traffic concerns.
B: Subscribing to all available services just to use up credits is wasteful and might not address the customer's core concerns. It's crucial to prioritize based on actual needs, not just available funds.
Why C is correct: Verifying conformance to standards and regulations, assessing risk and criticality of workloads, and then aligning subscriptions to those needs is the most responsible and effective approach. This ensures the customer invests in the right security capabilities that address their specific concerns and compliance requirements, maximizing the value of their credits. This aligns with Palo Alto Networks best practices for security deployments, which emphasize a risk-based approach.
Why A, B, and D are incorrect:
A and D: Simply activating Advanced WildFire without understanding the customer's specific needs is not a strategic approach. Starting with the largest or smallest vCPU models is arbitrary and doesn't guarantee the best use of resources or the most effective security posture. It also doesn't directly address the SaaS traffic concerns.
B: Subscribing to all available services just to use up credits is wasteful and might not address the customer's core concerns. It's crucial to prioritize based on actual needs, not just available funds.
by Ada at Jul 01, 2025, 01:17 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).