Palo Alto Networks PSE-DataCenter Exam Practice Test Instant Access

Question 1

How many more NPCs can fit in a PA - 7080 compared to a PA - 7050?

AFour

BSix

CEight

DIt depends upon whether the front - to - back airflow duct is in use.

Answer : A

Question 2

What is required to support the second generation NPCs on a PA - 7050?

AThe PA - 7050 cannot support the second generation NPCs; a PA - 7080 is required.

BPAN - OS 6.1 or higher

CPAN - OS 7.0 or higher

DThe second generation NPCs must be installed in matched pairs.

Answer : C

Question 3

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server

BAdd a DoS Protection Profile with defined session count.

CAdd a Vulnerability Protection Profile to block the attack.

DAdd QoS Profiles to throttle incoming requests.

Answer : B

Question 4

By increasing the number of vCPUs in a VM - Series firewall from 4 to 8, by what factor is performance expected to increase?

ABy a pproximately a factor of 2

BBy a pp roximately a factor of 1.8

CBy a pproximately a factor of 2.2

DPerformance will not increase

Answer : D

Question 5

What is the maximum number of QSFP+ interfaces that can be supported in a PA - 7080, and what is the minimum version of PAN - OS required to support them?

A12, PAN - OS 6.0

B12, PAN - OS 6.1

C12, PAN - OS 7.0

D20, PAN - OS 6.0

E20, PAN - OS 6.1

F20, PAN - OS 7.0

Answer : F

Question 6

A network covers three geographical areas: Americas, Europe (EMEA), and Asia (APAC). The APAC segment of the network consists of nine HA pairs of PA-3060 firewalls, generating a combined log output of 25 K logs per second. Only 14 days of traffic log retention is required.

Which management and logging solution will be effective and cost-efficient for this segment of the network?

ATwo M-500s in HA management at the global level, with one M-100 with 4 TB of storage for APAC

BTwo M-500s in HA management at the global level, and one log collector-mode M-500 with 8 TB of storage for APAC

CTwo M-500s in HA management at the global level, and two log collector-mode M-500s in a log collector group with 16 TB of storage for APAC

DTwo Dual-mode M-500s in HA for both global management and storage. Each M-500 has 8 TB of storage

Answer : C

Question 7

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

AIt can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.

BIt can bootstrap the virtual firewall for dynamic deployment scenarios

CIt can manage the virtual firewalls' resource use, allowing for VM resource over-subscription.

DIt can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support

Answer : B, D

Palo Alto Networks PSE-DataCenter PSE Professional Accreditation-Data Center Exam Practice Test