Palo Alto Networks PSE-DataCenter Exam Questions Instant Access

Question 1

What is the maximum number of QSFP+ interfaces that can be supported in a PA - 7080, and what is the minimum version of PAN - OS required to support them?

A12, PAN - OS 6.0

B12, PAN - OS 6.1

C12, PAN - OS 7.0

D20, PAN - OS 6.0

E20, PAN - OS 6.1

F20, PAN - OS 7.0

Answer : F

Question 2

By increasing the number of vCPUs in a VM - Series firewall from 4 to 8, by what factor is performance expected to increase?

ABy a pproximately a factor of 2

BBy a pp roximately a factor of 1.8

CBy a pproximately a factor of 2.2

DPerformance will not increase

Answer : D

Question 3

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server.

BAdd a Vulnerability Protection Profile to block the attack.

CAdd QoS Profiles to throttle incoming requests.

DAdd a DoS Protection Profile with defined session count.

Answer : D

Question 4

What is the default interval for the HA heartbeat ? :

A100 milliseconds

B1000 milliseconds

C2 seconds

D5 seconds

Answer : B

Question 5

What is the result of deploying virtualization in your data center?

Areduced security threat

Breduced operational costs

Cincreased hardware capital costs

Dincreased host provisioning

Answer : B

Question 6

Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

AWildFire on the firewall, and AutoFocus on Panorama

BURL Filtering on the firewall, and MindMeld on Panorama

CThreat Prevention on the firewall, and Support on Panorama

DGlobalProtect on the firewall, and Threat Prevention on Panorama

Answer : C

Question 7

Which of these statements is true about Dynamic Address Groups?

AT hey allow you to create a policy that automatically adapts to changes --- adds, moves,
or deletions of servers.

BThey enable the flexibility to apply different rules to th e same server based on tags
that define its role on the network, the operating system, or the different kinds of traffic it processes.

CA dynamic address group uses tags as a filtering criterion to determine its members.

DThe filtering criteria uses logical and , or , and not operators.

Answer : A, B, C

Palo Alto Networks PSE Professional Accreditation-Data Center PSE-DataCenter Exam Questions