Palo Alto Networks PSE-StrataDC Palo Alto Networks System Engineer - Strata Data Center Exam Practice Test

Page: 1 / 14
Total 60 questions
Question 1

Which VM series model is NOT supported on VMware NSX platform?



Answer : C

on VMware NSX, only the VM-100, VM-200, VM-300, VM-500, and VM-1000-HV firewalls are supported.

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/vm-series-models.html


Question 2

Which VM-Series can be deployed on VMware NSX?



Question 3

What is the default session distribution policy in the PA-7000 Series?



Answer : D

(

PA-7000 Series firewalls only

) New sessions are assigned to a DP on the same NPC on which the first packet of the session arrived. The selection of the DP is based on the session-load algorithm but, in this case, sessions are limited to the DPs on the ingress NPC.

Depending on the traffic and network topology, this policy generally decreases the odds that traffic will need to traverse the switch fabric.

Use this policy to reduce latency if both ingress and egress are on the same NPC. If the firewall has a mix of NPCs (PA-7000 20G and PA-7000 20GXM for example), this policy can isolate the increased capacity to the corresponding NPCs and help to isolate the impact of NPC failures.


Question 4

When deploying VM series on Openstack platform, which statement is correct?



Answer : B


Question 5

Which VM-Series can be deployed on Amazon Web Services (AWS)?



Answer : C


Question 6

A company allows employees some personal use of the internet during work time However the CEO is concerned that employees are using too much of the bandwidth for YouTube. thus causing a performance problem. Which section of the SLR could confirm or allay this concern?



Answer : B


Question 7

When deploying VM series on NSX platform to support micro-segmentation, which statement is NOT correct?



Answer : A


Page:    1 / 14   
Total 60 questions