Palo Alto Networks PSE-DataCenter Professional PSE-STRATADC Questions & Answers

• Question 41:

  Which three software components have integration for deploying a VM-Series firewall in OpenStack? (Choose three)

  A. Mirantis OpenStack distribution

  B. Nuage VSP SDN controller

  C. VMWare NSX for OpenStack

  D. Cisco ACI

  E. Contrail SDN controller

  Correct Answer: ACD

• Question 42:

  Which two methods provide a virtual IP address when implementing active/active HA? (Choose two)

  A. VRRP

  B. HSRP

  C. floating IP address

  D. ARP load sharing

  Correct Answer: CD

• Question 43:

  Which VM-Series can be deployed on Amazon Web Services (AWS)?

  A. Can deploy any VM-Series except the VM-50

  B. Only VM-100, VM-200 and VM-300

  C. Any VM-Series model

  D. Any VM-Series model except the VM-700

  Correct Answer: C

• Question 44:

  Which configuration is requiredto share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

  A. notify device groups within VMware Services Manager

  B. a User-ID agent on a Windows domain server

  C. VMware Information Sources

  D. none, sharing happens by default

  Correct Answer: B

• Question 45:

  Which three steps are valid for deploying a VM-Series firewall on NSX? (Choose three)

  A. create steering policies to redirect traffic to the VM-Series firewall

  B. create a vDC and a vApp that includes the VM-Series firewall

  C. register the VM-Series firewall as a service

  D. obtain the AMI from market place

  E. enable communication between Panorama and the NSX Manager

  Correct Answer: ABC

  https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-onvmware-nsx/vm-series-firewall-for-nsx-deployment-checklist

• Question 46:

  Which feature removes the limitation of requiring the first interface to be management?

  A. Management interface swap

  B. Utilize a separate Load Balancer VM

  C. Utilize a separate NAT VM.

  D. Dataport interface switch

  Correct Answer: B

• Question 47:

  A customer wants to completely segment their internal networks They have Cisco switches and extensively use 10Gbps interfaces. They are running VMware ESXi and are considering implementing NSX.

  Which three Palo Alto Networks firewall models will support this deployment? (Choose three)

  A. PA-3050

  B. VM-100

  C. VM-300

  D. PA-3250

  E. PA-7050

  Correct Answer: ADE

• Question 48:

  Which two OpenStack components areused in the creation of a VM-Series firewall from a heat template in OpenStack? (Choose two)

  A. Swift creates the storage resources.

  B. Nova creates the firewall instance.

  C. Horizon

  D. Neutron creates the network resources.

  Correct Answer: AC

• Question 49:

  Describe the Automated Deployment of the NSX VM-Series firewall for NSX Solution?

  A. When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed, provisioned and available for immediate policy enforcement without any little manual intervention.

  B. When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed, provisioned and available for immediate policy enforcement without any manual intervention.

  C. When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed provisioned and after manually retrieving licenses available for immediate policy enforcement.

  D. When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed and after manually adding licenses available for policy enforcement.

  Correct Answer: B

• Question 50:

  Which option describes Arista's micro-segmentation?

  A. Arista and VMware are extending secure segmentation with an open API (RESTZJSON)-based exchange, which allows NSX to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

  B. Arista and Kubernetes are extending secure segmentation with an open API (RESTVJSON)-based exchange, which allows Kubernetes to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

  C. Arista's micro-segmentation and macro-segmentation are identical concepts that can be used interchangeably

  D. Arista and VMware both perform identical functions for NGFW micro-segmentation

  Correct Answer: B