Palo Alto Networks PSE-STRATA-DC Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA-DC Online Questions & Answers

• Question 1:

  How does the Palo Alto Networks NGFW integrate with Arista Networks Macro- Segmentation Service?

  A. Arista supports all hardware models of the Palo Alto Networks NGFW natively.
  B. Arista allows standalone non-HA firewalls to be attached to a service leaf switch. You must configure an Elastic Load Balancer to obtain fault tolerance.
  C. Arista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.
  D. Arista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls
  D. Arista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls

• Question 2:

  Which VM-Series can be deployed on VMware NSX?

  A. VM-100, VM-200, VM-300. VM-500. VM-1000-HV
  B. VM-50r VM-100, VM-200, VM-300, VM-500
  C. VM-100, VM-200, VM-300, VM-500, VM-700
  D. All VM Series Models can be deployed on VMware NSX
  A. VM-100, VM-200, VM-300. VM-500. VM-1000-HV

• Question 3:

  Which three criteria are required to deploy VM-Series firewalls in High Availability? (Choose three)

  A. deployed on same type of hypervisor
  B. allocate identical CPU cores and network interfaces
  C. assigned identical licenses and subscriptions
  D. deployed on a different host
  E. configured asymmetric routing
  A. deployed on same type of hypervisor
  B. allocate identical CPU cores and network interfaces
  C. assigned identical licenses and subscriptions

• Question 4:

  Which capacity license does an administrator get with a pay-as-you-go license on Public Cloud market places?

  A. VM-100
  B. VM-1000
  C. VM-300
  D. VM-200
  A. VM-100

• Question 5:

  What is a company that is moving as much of its business as possible into Microsoft Azure trying to minimize?

  A. capital expenses
  B. operating expenses
  C. security exposure
  D. operating expenses and capital expenses
  B. operating expenses

• Question 6:

  Whichconfiguration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?

  A. Create security groups only.
  B. Create security groups and mark them as exchangeable.
  C. Create security groups with tags marked as shareable.
  D. Create security groups and use them in an NSX-to-Palo Alto Networks redirection policy.
  A. Create security groups only.

• Question 7:

  Which option describes Arista's micro-segmentation?

  A. Arista and VMware are extending secure segmentation with an open API (RESTZJSON)-based exchange, which allows NSX to federate with CloudVision to extend the micro-segmentation policy for physical workloads.
  B. Arista and Kubernetes are extending secure segmentation with an open API (RESTVJSON)-based exchange, which allows Kubernetes to federate with CloudVision to extend the micro-segmentation policy for physical workloads.
  C. Arista's micro-segmentation and macro-segmentation are identical concepts that can be used interchangeably
  D. Arista and VMware both perform identical functions for NGFW micro-segmentation
  B. Arista and Kubernetes are extending secure segmentation with an open API (RESTVJSON)-based exchange, which allows Kubernetes to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

• Question 8:

  When would a PA-7000 Series NPC GQXM Card be preferable to a PA-7000 Series NPC GQ Card?

  A. When the organization requires a greater number of sessions
  B. When the environment has a need for more SFP+ interfaces
  C. When the organization requires gear with a smaller slot size.
  D. When the environment has a need for more policy rules.
  A. When the organization requires a greater number of sessions

• Question 9:

  How does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies on demand? (Choose two.)

  A. Aperture Orchestration Engine (AOE)
  B. Support for Dynamic Address Groups
  C. Fully instrumented API
  D. VM Orchestration Policy Editor
  B. Support for Dynamic Address Groups
  C. Fully instrumented API

• Question 10:

  When deploying VM series on Openstack platform, which statement is correct?

  A. Allow configuration of at least one interface
  B. OpenStack compute node could be installed on a hypervisor platform
  C. Accept the VM-Series OVA image
  D. Set Instance type OS::Nova Server
  B. OpenStack compute node could be installed on a hypervisor platform