Palo Alto Networks PSE-DataCenter Professional PSE-STRATADC Questions & Answers

• Question 11:

  What are the benefits of NSX-V?

  A. supports the Data Plane Development Kit (DPDK) libraries; enables Stackdnver Monitoring on the VMware Series Firewall, works with Cloud Launcher

  B. virt-manager wizard to help with the installation process; virsh command to deploy the VM-Series; virtinstallcommand to install

  C. sturdier centralized management; automated deployment ease in administering tenants and dedicated compute infrastructure; tighter integration between virtual environment and security enforcement of dynamic security

  D. leverages Prism Central

  Correct Answer: A

• Question 12:

  What is the major decision factor that customers use when selecting a managed container platform such as AS/EKS/GKE?

  A. licensing costs

  B. enhanced capabilities not available in vanilla K8s

  C. no need to manage containers, just the application code.

  D. reduced operational costs and management overhead

  Correct Answer: B

• Question 13:

  Which capacity license does an administrator get with a pay-as-you-go license on Public Cloud market places?

  A. VM-100

  B. VM-1000

  C. VM-300

  D. VM-200

  Correct Answer: A

• Question 14:

  What is the default session distribution policy in the PA-7000 Series?

  A. Hash

  B. Egress-Slot

  C. Round Robin

  D. Ingress-Slot

  Correct Answer: D

  ( PA-7000 Series firewalls only ) New sessions are assigned to a DP on the same NPC on which the first packet of the session arrived. The selection of the DP is based on the session-load algorithm but, in this case, sessions are limited to the DPs on the ingress NPC.

  Depending on the traffic and network topology, this policy generally decreases the odds that traffic will need to traverse the switch fabric.

  Use this policy to reduce latency if both ingress and egress are on the same NPC. If the firewall has a mix of NPCs (PA-7000 20G and PA-7000 20GXM for example), this policy can isolate the increased capacity to the corresponding NPCs and help to isolate the impact of NPC failures.

• Question 15:

  What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three)

  A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls.

  B. The deployed VM-Series firewall can establish communications with Panorama.

  C. Panorama has been configured to recognize both the NSX Manager and vCenter.

  D. Panorama can establish communications to the public Palo Alto Networks update servers.

  E. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment.

  Correct Answer: ACD

• Question 16:

  What are two ways to size a VM-Series firewall deployment to secure a VMware ESXi environment? (Choose two)

  A. one per virtual network

  B. one per vCenter server

  C. one per SaaS application in use

  D. one per ESXi host

  Correct Answer: AC

• Question 17:

  In the following scenario, Route-based firewall redundancy is deployed in a Data Center, which statement is true?

  

  A. IP addresses of Firewall interfaces will move between devices when a firewall fails.

  B. The 2 firewalls are in Active-Standby HA status.

  C. Firewalls use dynamic routing protocols to determine the best path.

  D. Floating IP addresses are necessary for HA configuration.

  Correct Answer: C

• Question 18:

  When deploying VM series on NSX platform to support micro-segmentation, which statement is NOT correct?

  A. VM-Series uses NetX API to receive and send packets

  B. Traffic steering rules could be defined on Panorama and pushed to NSX Manager

  C. VM-Series provide Multi-tenancy support with multiple zones

  D. One panorama could support to connect with only one NSX manager

  Correct Answer: A

• Question 19:

  Which two options describe use cases of internal and external tags in Panorama? (Choose two)

  A. device group membership

  B. template membership

  C. Dynamic Address Group membership

  D. rule grouping

  Correct Answer: AC

• Question 20:

  Whichconfiguration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?

  A. Create security groups only.

  B. Create security groups and mark them as exchangeable.

  C. Create security groups with tags marked as shareable.

  D. Create security groups and use them in an NSX-to-Palo Alto Networks redirection policy.

  Correct Answer: A