Palo Alto Networks PSE-STRATA-DC Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA-DC Online Questions & Answers

• Question 1:

  Whichthree deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three )

  A. Partner Service
  B. Boot Strap
  C. Prism Central
  D. Tier-1 insertion
  E. Tier-0 insertion
  A. Partner Service
  D. Tier-1 insertion
  E. Tier-0 insertion

• Question 2:

  Which three steps are valid for deploying a VM-Series firewall on NSX? (Choose three )

  A. create steering policies to redirect traffic to the VM-Series firewall
  B. create a vDC and a vApp that includes the VM-Series firewall
  C. register the VM-Series firewall as a service
  D. obtain the AMI from market place
  E. enable communication between Panorama and the NSX Manager
  A. create steering policies to redirect traffic to the VM-Series firewall
  B. create a vDC and a vApp that includes the VM-Series firewall
  C. register the VM-Series firewall as a service

• Question 3:

  Which interface mode does an administrator use to generate the statdump file that can be converted into an SLR? Assume that the administrator wants to make the evaluation as unintrusive as possible

  A. Virtual Wire
  B. TAP
  C. Layer 2
  D. Layer 3
  B. TAP

• Question 4:

  Which three software components have integration for deploying a VM-Series firewall in OpenStack? (Choose three)

  A. Mirantis OpenStack distribution
  B. Nuage VSP SDN controller
  C. VMWare NSX for OpenStack
  D. Cisco ACI
  E. Contrail SDN controller
  A. Mirantis OpenStack distribution
  C. VMWare NSX for OpenStack
  D. Cisco ACI

• Question 5:

  How are workloads protected in Prisma Cloud Enterprise and Prisma Cloud Compute''

  A. Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.
  B. Prisma Cloud Enterprise provides workload protection through integration with the NGFW.
  C. Prisma Cloud Compute offers agentless protection for all workload types.
  D. Prisma Cloud Enterprise does not offer workload protection because it is a SaaS based product and agentless
  A. Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.

• Question 6:

  When deploying VM series on NSX platform to support micro-segmentation, which statement is NOT correct?

  A. VM-Series uses NetX API to receive and send packets
  B. Traffic steering rules could be defined on Panorama and pushed to NSX Manager
  C. VM-Series provide Multi-tenancy support with multiple zones
  D. One panorama could support to connect with only one NSX manager
  A. VM-Series uses NetX API to receive and send packets

• Question 7:

  In PAN-OS, which three NSX features can be pushed from Panorama? (Choose three )

  A. user IP mappings
  B. steering rules
  C. multiple authorization codes
  D. security group assignments of VMs
  E. security groups
  A. user IP mappings
  C. multiple authorization codes
  E. security groups

• Question 8:

  Which task is required to create steering rules on NSX-V Manager?

  A. Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required details
  B. Configure the rule in Panorama and push it to NSX-V Manager.
  C. Select Fabric > Access Policies > Quick Start and follow the prompts
  D. Add a network introspective service and select Redirect to Service under Action.
  A. Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required details

• Question 9:

  Whichconfiguration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?

  A. Create security groups only.
  B. Create security groups and mark them as exchangeable.
  C. Create security groups with tags marked as shareable.
  D. Create security groups and use them in an NSX-to-Palo Alto Networks redirection policy.
  A. Create security groups only.

• Question 10:

  What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three.)

  A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls
  B. The deployed VM-Series firewall can establish communications with Panorama.
  C. Panorama has been configured to recognize both the NSX Manager and vCenter.
  D. Panorama can establish communications to the public Palo Alto Networks update servers.
  E. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment
  A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls
  C. Panorama has been configured to recognize both the NSX Manager and vCenter.
  D. Panorama can establish communications to the public Palo Alto Networks update servers.