Palo Alto Networks PSE-StrataDC Exam Questions Instant Access

Question 1

How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

Aby creating an access policy

Bthrough a policy-based redirect (PBR)

Ccontracts between EPGs that send traffic to the firewall using a shared policy

Dthrough a virtual machine monitor (VMM) domain

Answer : C

Question 2

Which VM-Series can be deployed on Amazon Web Services (AWS)?

ACan deploy any VM-Series except the VM-50

BOnly VM-100, VM-200 and VM-300

CAny VM-Series model

DAny VM-Series model except the VM-700

Answer : C

Question 3

Which configuration is required to share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

Anotify device groups within VMware Services Manager

Ba User-ID agent on a Windows domain server

CVMware Information Sources

Dnone, sharing happens by default

Answer : B

Question 4

Which feature removes the limitation of requiring the first interface to be management?

AManagement interface swap

BUtilize a separate Load Balancer VM

CUtilize a separate NAT VM.

DDataport interface switch

Answer : B

Question 5

What is a company that is moving as much of its business as possible into Microsoft Azure trying to minimize?

Acapital expenses

Boperating expenses

Csecurity exposure

Doperating expenses and capital expenses

Answer : B

Question 6

A single VM runs a web server and a DNS server A separate VM needs to access the DNS server, but is not allowed to access the web server What network control functionality is necessary to enforce this security posture'?

Acan use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

Bcan use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

Ccan use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

Dcan use a specialized VM with advanced threat protection for this requirement

Answer : C

Question 7

How do Palo Alto Networks NGFWs integrate with an ACI architecture?

ASDN code hooks can help to detonate malicious file samples designed to detect virtual environments

BTraffic can be automatically redirected using static Address objects.

CVXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.

DControllers can program firewalls using a REST-based API.

Answer : B

Palo Alto Networks System Engineer - Strata Data Center PSE-StrataDC Exam Questions