Palo Alto Networks PSE-DataCenter Exam Questions Instant Access

Question 1

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer's requirements? (Choose two.)

AVirtual systems

BHA active/active

CPolicy-based forwarding

DHA active/passive
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/route-based-redundancy

Answer : B, C

Question 2

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

AIt can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.

BIt can bootstrap the virtual firewall for dynamic deployment scenarios

CIt can manage the virtual firewalls' resource use, allowing for VM resource over-subscription.

DIt can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support

Answer : B, D

Question 3

Which of these statements is true about Dynamic Address Groups?

AT hey allow you to create a policy that automatically adapts to changes --- adds, moves,
or deletions of servers.

BThey enable the flexibility to apply different rules to th e same server based on tags
that define its role on the network, the operating system, or the different kinds of traffic it processes.

CA dynamic address group uses tags as a filtering criterion to determine its members.

DThe filtering criteria uses logical and , or , and not operators.

Answer : A, B, C

Question 4

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.

Which VPN configuration would adapt to changes when deployed to the future site?

APreconfigured GlobalProtect satellite

BPreconfigured GlobalProtect client

CPreconfigured IPsec tunnels

DPreconfigured PPTP Tunnels

Answer : A

Question 5

Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

Astateless firewall

Bnext-generation firewall

Cpersonal endpoint firewall

Dport-based firewall

Answer : B

Question 6

What is required to support the second generation NPCs on a PA - 7050?

AThe PA - 7050 cannot support the second generation NPCs; a PA - 7080 is required.

BPAN - OS 6.1 or higher

CPAN - OS 7.0 or higher

DThe second generation NPCs must be installed in matched pairs.

Answer : C

Question 7

Which two designs require virtual systems? (Choose two.)

AA shared gateway interface that does not need a full administrative boundary

BA virtual router as a replacement for an internet-facing router

CA single physical firewall shared by different organizations, each with unique traffic control needs

DA VMware NSX deployment that needs micros segmentation

Answer : B, C

Palo Alto Networks PSE Professional Accreditation-Data Center PSE-DataCenter Exam Questions