Palo Alto Networks PSE-DataCenter Professional PSE-STRATADC Questions & Answers

• Question 21:

  A single VM runs a web server and a DNS server A separate VM needs to access the DNS server, but is

  not allowed to access the web server.

  What network control functionality is necessary to enforce this security posture?

  A. can use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

  B. can use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

  C. can use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

  D. can use a specialized VM with advanced threat protection for this requirement

  Correct Answer: C

• Question 22:

  In a VMware deployment, in order for the customer to get maximum performance out of a VM-700 firewall in PAN-OS 8 x how many virtual CPU cores can be used?

  A. 8

  B. 3

  C. 32

  D. 16

  Correct Answer: A

• Question 23:

  How does Twistlock offer workload security at runtime?

  A. works with the IDP to identify over-privileged containers and services and restricts network access

  B. quarantines containers that demonstrate increased CPU and memory usage

  C. automatically patches vulnerabilities and compliance issues for every container and service

  D. builds a whitelist security model automatically for every container and service

  Correct Answer: A

• Question 24:

  Is vulnerability analysis against images in the registry sufficient for security?

  A. Yes, containers do not have unique vulnerabilities.

  B. No, you should do vulnerability analysis only against the running containers, which are vulnerable.

  C. Yes, you are ensuring that the images the containers are based on are secure.

  D. No, you need to do analysis in the CI system, in the registry, and against instantiated containers

  Correct Answer: C

• Question 25:

  What is a company that is moving as much of its business as possible into Microsoft Azure trying to minimize?

  A. capital expenses

  B. operating expenses

  C. security exposure

  D. operating expenses and capital expenses

  Correct Answer: B

• Question 26:

  Which interface mode does an administrator use to generate the statdump file that can be converted into an SLR?

  A. Virtual Wire

  B. TAP

  C. Layer 2

  D. Layer 3

  Correct Answer: B

• Question 27:

  Which two design options address split-brain when configuring HA? (Choose two)

  A. Send heartbeats across the HA2 interfaces.

  B. Bundle multiple interfaces in an Aggregated Interface Group and assign HA2.

  C. Use the heartbeat backup.

  D. Add a backup HA1 interface.

  Correct Answer: CD

• Question 28:

  When deploying VM series on Openstack platform, which statement is correct?

  A. Allow configuration of at least one interface

  B. OpenStack compute node could be installed on a hypervisor platform

  C. Accept the VM-Series OVA image

  D. Set Instance type OS::Nova Server

  Correct Answer: B

• Question 29:

  A company allows employees some personal use of the internet during work time However the CEO is concerned that employees are using too much of the bandwidth for YouTube. thus causing a performance problem. Which section of the SLR could confirm or allay this concern?

  A. Categories with the Most Applications

  B. Categories Consuming the Most Bandwidth

  C. Bandwidth Consumed by Applications

  D. High-Risk Applications

  Correct Answer: B

• Question 30:

  Which type of cloud service can be protected by an inline firewall controlled by the organization rather than by the cloud provider?

  A. SaaS

  B. laaS

  C. PaaS

  D. FaaS

  Correct Answer: B