Palo Alto Networks PSE-DataCenter Exam Questions Instant Access

Question 1

Which statement is true regarding the HA3 interface on VM - Series firewalls in an HA configuration?

AThe second VM - Series firewall should be in a different host and the HA3 connection should be over a dedicated high - speed link .

BThe second VM - Series firewall should be in the same virtual machine so the HA3 connection does not have to travel over a physical connection .

CThe HA3 connection should traverse no more than a single virtual switch.

DThere is no HA3 connection on a VM - Series firewall.

Answer : D

Question 2

How many more NPCs can fit in a PA - 7080 compared to a PA - 7050?

AFour

BSix

CEight

DIt depends upon whether the front - to - back airflow duct is in use.

Answer : A

Question 3

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server

BAdd QoS Profiles to throttle incoming requests

CAdd a tuned DoS Protection Profile

DAdd an Anti-Spyware Profile to block attacking IP address

Answer : C

Question 4

What is the maximum number of QSFP+ interfaces that can be supported in a PA - 7080, and what is the minimum version of PAN - OS required to support them?

A12, PAN - OS 6.0

B12, PAN - OS 6.1

C12, PAN - OS 7.0

D20, PAN - OS 6.0

E20, PAN - OS 6.1

F20, PAN - OS 7.0

Answer : F

Question 5

Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

Astateless firewall

Bnext-generation firewall

Cpersonal endpoint firewall

Dport-based firewall

Answer : B

Question 6

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

AIt can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.

BIt can bootstrap the virtual firewall for dynamic deployment scenarios

CIt can manage the virtual firewalls' resource use, allowing for VM resource over-subscription.

DIt can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support

Answer : B, D

Question 7

A network covers three geographical areas: Americas, Europe (EMEA), and Asia (APAC). The APAC segment of the network consists of nine HA pairs of PA-3060 firewalls, generating a combined log output of 25 K logs per second. Only 14 days of traffic log retention is required.

Which management and logging solution will be effective and cost-efficient for this segment of the network?

ATwo M-500s in HA management at the global level, with one M-100 with 4 TB of storage for APAC

BTwo M-500s in HA management at the global level, and one log collector-mode M-500 with 8 TB of storage for APAC

CTwo M-500s in HA management at the global level, and two log collector-mode M-500s in a log collector group with 16 TB of storage for APAC

DTwo Dual-mode M-500s in HA for both global management and storage. Each M-500 has 8 TB of storage

Answer : C

Palo Alto Networks PSE Professional Accreditation-Data Center PSE-DataCenter Exam Questions