Palo Alto Networks PSE-StrataDC Exam Questions Instant Access

Question 1

Which VM-Series can be deployed on VMware NSX?

AVM-100, VM-200, VM-300. VM-500. VM-1000-HV

BVM-50r VM-100, VM-200, VM-300, VM-500

CVM-100, VM-200, VM-300, VM-500, VM-700

DAll VM Series Models can be deployed on VMware NSX

Answer : A

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/about-the-vm-series-firewall/vm-series-models.html

Question 2

Which feature removes the limitation of requiring the first interface to be management?

AManagement interface swap

BUtilize a separate Load Balancer VM

CUtilize a separate NAT VM.

DDataport interface switch

Answer : B

Question 3

What is a company that is moving as much of its business as possible into Microsoft Azure trying to minimize?

Acapital expenses

Boperating expenses

Csecurity exposure

Doperating expenses and capital expenses

Answer : B

Question 4

What is the major decision factor that customers use when selecting a managed container platform such as AS/EKS/GKE?

Alicensing costs

Benhanced capabilities not available in vanilla K8s

Cno need to manage containers, just the application code.

Dreduced operational costs and management overhead

Answer : B

Question 5

In the following scenario, Route-based firewall redundancy is deployed in a Data Center, which statement is true?

AIP addresses of Firewall interfaces will move between devices when a firewall fails

BThe 2 firewalls are in Active-Standby HA status

CFirewalls use dynamic routing protocols to determine the best path

DFloating IP addresses are necessary for HA configuration

Answer : C

Question 6

What are the benefits of NSX-V?

Asupports the Data Plane Development Kit (DPDK) libraries; enables Stackdnver Monitoring on the VMware Series Firewall; works with Cloud Launcher

Bvirt-manager wizard to help with the installation process; virsh command to deploy the VM-Series; virt-install command to install

Csturdier centralized management; automated deployment ease in administering tenants and dedicated compute infrastructure; tighter integration between virtual environment and security enforcement of dynamic security

Dleverages Prism Central

Answer : A

Question 7

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

ACreate a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch

BEdit the IP address of all of the affected VMs

CSend the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway

DCreate a Layer 3 interface in the same subnet as the VMs and configure proxy ARP

Answer : D

Palo Alto Networks System Engineer - Strata Data Center PSE-StrataDC Exam Questions