Palo Alto Networks PSE-DATACENTER Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-DATACENTER Online Questions & Answers

• Question 1:

  What is the maximum number of QSFP+ interfaces that can be supported in a PA - 7080, and what is the minimum version of PAN - OS required to support them?

  A. 12, PAN - OS 6.0
  B. 12, PAN - OS 6.1
  C. 12, PAN - OS 7.0
  D. 20, PAN - OS 6.0
  E. 20, PAN - OS 6.1
  F. 20, PAN - OS 7.0
  F. 20, PAN - OS 7.0

• Question 2:

  Which of these statements is true about Dynamic Address Groups?

  A. T hey allow you to create a policy that automatically adapts to changes -- adds, moves, or deletions of servers.
  B. They enable the flexibility to apply different rules to th e same server based on tags that define its role on the network, the operating system, or the different kinds of traffic it processes.
  C. A dynamic address group uses tags as a filtering criterion to determine its members.
  D. The filtering criteria uses logical and , or , and not operators.
  A. T hey allow you to create a policy that automatically adapts to changes -- adds, moves, or deletions of servers.
  B. They enable the flexibility to apply different rules to th e same server based on tags that define its role on the network, the operating system, or the different kinds of traffic it processes.
  C. A dynamic address group uses tags as a filtering criterion to determine its members.

• Question 3:

  What is required to support the second generation NPCs on a PA - 7050?

  A. The PA - 7050 cannot support the second generation NPCs; a PA - 7080 is required.
  B. PAN - OS 6.1 or higher
  C. PAN - OS 7.0 or higher
  D. The second generation NPCs must be installed in matched pairs.
  C. PAN - OS 7.0 or higher

• Question 4:

  In addition to the expanded capacity for NPCs, what else is improved in the PA - 7080 over the PA - 7050?

  A. A second LPC is standard.
  B. A second SMC is standard.
  C. Front - to - back airflow is standard.
  D. Available 100Gb p s interfaces , but only with PAN - OS 7.0 and higher
  C. Front - to - back airflow is standard.

• Question 5:

  Which three of these are valid profiles for configuring HA timers?

  A. Recommended
  B. Custom
  C. Aggressive
  D. Low - latency
  E. Advanced
  A. Recommended
  C. Aggressive
  E. Advanced

• Question 6:

  A price sensitive customer wants to prevent attacks on a windows 2008 Virtual Server. The server will max out at 100Mbps but needs to have 45,000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

  A. VM-200
  B. VM-100
  C. VM-300
  D. VM-50
  D. VM-50

• Question 7:

  XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

  Which two features must be enabled to meet the customer's requirements? (Choose two.)

  A. Virtual systems
  B. HA active/active
  C. Policy-based forwarding
  D. HA active/passive
  B. HA active/active
  C. Policy-based forwarding

• Question 8:

  A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

  A. Define a custom App-ID to ensure that only legitimate application traffic reaches the server.
  B. Add a Vulnerability Protection Profile to block the attack.
  C. Add QoS Profiles to throttle incoming requests.
  D. Add a DoS Protection Profile with defined session count.
  D. Add a DoS Protection Profile with defined session count.

• Question 9:

  Which two designs require virtual systems? (Choose two.)

  A. A shared gateway interface that does not need a full administrative boundary
  B. A virtual router as a replacement for an internet-facing router
  C. A single physical firewall shared by different organizations, each with unique traffic control needs
  D. A VMware NSX deployment that needs micros segmentation
  B. A virtual router as a replacement for an internet-facing router
  C. A single physical firewall shared by different organizations, each with unique traffic control needs

• Question 10:

  What is the difference between static and dynamic tags?

  A. Static tags exist, but dynamic tags do not.
  B. Dynamic tags exist, but static tags do not.
  C. S tatic tags are part of the configuration on the firewall, but dynamic tags are part of the runtime configuration.
  D. Static tags are hard coded into each VM, but dynamic tags are assigned by the firewall during runtime.
  C. S tatic tags are part of the configuration on the firewall, but dynamic tags are part of the runtime configuration.