Palo Alto Networks PSE-DataCenter Professional PSE-STRATADC Questions & Answers

• Question 31:

  Which three advantages of the Palo Alto Networks platform architecture are used to enable security orchestration in SDN? (Choose three)

  A. a full set of APIs enabling programmatic control of policy and configuration

  B. NVGRE support for advanced VLAN integration

  C. integration with leading orchestration platforms: VMware NSX. OpenStack. and Cisco ACI

  D. Dynamic Address Groups to adapt Security policies dynamically

  E. VXLAN support for network-layer abstraction

  Correct Answer: CDE

• Question 32:

  What is the primary operational benefit of a managed Kubernetes service from a Cloud Service Provider?

  A. reduced complexity, alleviates the need to run masters

  B. less expensive, typically offered at a lower cost than running containers on a VM

  C. more powerful, offers more configuration options than running your own distribution of Kubernetes

  D. increased visibility, provides more insight into application usage than what is natively available

  Correct Answer: A

• Question 33:

  How does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies on demand? (Choose two)

  A. Aperture Orchestration Engine (AOE)

  B. Support for Dynamic Address Groups

  C. Fully instrumented API

  D. VM Orchestration Policy Editor

  Correct Answer: BC

• Question 34:

  What are two types of security that can be implemented across every phase of the Build, Ship, and Run lifecycle of a workload? (Choose two)

  A. Runtime Security

  B. Firewalling

  C. Vulnerability Management

  D. Compliance or Configuration Management

  Correct Answer: CD

• Question 35:

  Which are two use cases for HSCI ports on the SMC module on PA-7000 Series? (Choose two)

  A. HA1 backup link in active/active HA

  B. HA1 link in active/passive HA

  C. HA3 link in active/active HA

  D. HA2 link in active/passive HA

  Correct Answer: CD

  https://docs.paloaltonetworks.com/hardware/pa-7000-hardware-reference/pa-7000-series-module-andinterface-card-information/pa-7000-series-switch-management-card-smc/pa-7000-series-smc-componentdescriptions

• Question 36:

  How does Palo Alto Networks integrate with VXLAN tagging?

  A. does not integrate with VXLAN tagging, so virtual appliances cannot be provided, but hardware appliances can be offered at the data center gateway border

  B. integrates with VXLAN. but scripting is necessary, and Professional Services should be engaged

  C. integrates fully into VXLAN architectures if they are provided by VMware

  D. does not integrate natively with VXLAN tagging, network equipment can convert VXLAN flows to VLANs and send those VLANs to Palo Alto Networks firewalls

  Correct Answer: C

• Question 37:

  How do Palo Alto Networks NGFWs integrate with an ACI architecture?

  A. SDN code hooks can help to detonate malicious file samples designed to detect virtual environments

  B. Traffic can be automatically redirected using static Address objects.

  C. VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.

  D. Controllers can program firewalls using a REST-based API.

  Correct Answer: B

• Question 38:

  Why are containers uniquely suitable for whitelist-based runtime security?

  A. Developers typically define the processes used in their containers within the Dockerfile

  B. Docker has a built-in runtime analysis capability to aid in whitelisting.

  C. Containers typically have only a few defined processes that should ever be executed.

  D. Operations teams typically know what processes are used within a container

  Correct Answer: A

• Question 39:

  Which protocol is used by VMware to encapsulate packets in NSX?

  A. VRLAN

  B. VXLAN

  C. GRE

  D. VMLAN

  Correct Answer: B

• Question 40:

  A network administrator is working on a VMware NSX installation with VM-1000-HV firewalls The administrator has created a security group that is populated with VMs The administrator is trying to create a Dynamic Address Group in Panorama, but the security group is not showing.

  Which task should the administrator perform first?

  A. Go into vCenter/NSX and push the objects to Panorama

  B. Delete and re-add the security group.

  C. Go into Panorama and synchronize the Address objects with NSX

  D. Check the NSX Security policy to ensure the security group has been used in a policy.

  Correct Answer: D