Palo Alto Networks PSE-DataCenter Professional PSE-STRATADC Questions & Answers

• Question 51:

  In which two ways can micro-segmentation save money for the enterprise? (Choose two)

  A. fewer capital expenses because fewer physical servers need to be bought

  B. fewer operating expenses because a smaller data center is operated

  C. fewer operating expenses because less public cloud capacity needs to be rented

  D. fewer capital expenses because the same number of physical servers can be kept in a smaller space

  Correct Answer: AC

• Question 52:

  Which three components are relevant for installing a VM-Series firewall in an OpenStack environment? (Choose three)

  A. bootstrap files including init-cfg.txt. bootstrap.xml, and VM-Series auth codes

  B. a valid VM-Series gcow2 image

  C. Hypervisor: ESX

  D. a valid OpenStack heat template in json format

  E. a valid vmseries vhd image

  F. a valid OpenStack heat template in yaml format

  Correct Answer: ABD

• Question 53:

  Which VM series model is NOT supported on VMware NSX platform?

  A. VM-500

  B. VM-1000-HV

  C. VM-700

  D. VM-300

  Correct Answer: C

  on VMware NSX, only the VM-100, VM-200, VM-300, VM-500, and VM-1000-HV firewalls are supported.

  https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/vmseries-models.html

• Question 54:

  Whichthree deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three)

  A. Partner Service

  B. Boot Strap

  C. Prism Central

  D. Tier-1 insertion

  E. Tier-0 insertion

  Correct Answer: ADE

  https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-onnsx/set-up-the-vm-series-firewall-on-nsx-t/supported-deployments-of-the-vm-series-firewall-on-vmwarensx-t.html

  

  You can deploy one or more instances of the VM-Series firewall as a partner service in your VMware NSXT Data Center. Attach a VM-Series firewall to any tier-0 or tier-1 logical router to protect north-south traffic. You can deploy the VM-Series firewall as standalone service instance or two firewalls in a high-availability (HA) pair. Panorama manages the connection with NSX-T Manager and the VM-Series firewalls deployed in your NSX-T software-defined datacenter. Tier-0 Insertion--Tier-0 insertion deploys a VM-Series firewall to a tier-0 logical router, which processes traffic between logical and physical networks. When you deploy the VM-Series firewall with tier-0 insertion, NSX-T Manager uses the deployment information you configured on Panorama to attach a firewall to a tier-0 logical router in virtual wire mode. Tier-1 Insertion--Tier-1 insertion deploys a VM-Series firewall to a tier-1 logical router, which provides downlink connections to segments and uplink connection to tier-0 logical routers. NSX-T Manager attaches VM-Series firewalls deployed with tier-1 insertions to a tier-1 logical router in virtual wire mode. After deploying the firewall, you configure traffic redirection rules that send traffic to the VM-Series firewall when crossing a tier-0 or tier-1 router. Security policy rules that you configure on Panorama are pushed to managed VM-Series firewalls and then applied to traffic passing through the firewall.

• Question 55:

  Which task is required to create steering rules on NSX-V Manager?

  A. Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required details

  B. Configure the rule in Panorama and push it to NSX-V Manager.

  C. Select Fabric > Access Policies > Quick Start and follow the prompts

  D. Add a network introspective service and select Redirect to Service under Action.

  Correct Answer: A

• Question 56:

  In PAN-OS, which three NSX features can be pushed from Panorama? (Choose three)

  A. user IP mappings

  B. steering rules

  C. multiple authorization codes

  D. security group assignments of VMs

  E. security groups

  Correct Answer: ACE

• Question 57:

  How are workloads protected in Prisma Cloud Enterprise and Prisma Cloud Compute''?

  A. Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.

  B. Prisma Cloud Enterprise provides workload protection through integration with the NGFW.

  C. Prisma Cloud Compute offers agentless protection for all workload types.

  D. Prisma Cloud Enterprise does not offer workload protection because it is a SaaS based product and agentless.

  Correct Answer: A

• Question 58:

  Which three criteria are required to deploy VM-Series firewalls in High Availability? (Choose three)

  A. deployed on same type of hypervisor

  B. allocate identical CPU cores and network interfaces

  C. assigned identical licenses and subscriptions

  D. deployed on a different host

  E. configured asymmetric routing

  Correct Answer: ABC

  In an HA configuration on the VM-Series firewalls, both peers must be deployed on the same type of hypervisor, have identical hardware resources (such as CPU cores/network interfaces) assigned to them, and have the set same of licenses/subscriptions.

  https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/vmseries-in-high-availability.html

• Question 59:

  Which environment is least likely to be placed on a public cloud by a hospital that has a large health information management application?

  A. production

  B. development

  C. testing

  D. QA

  Correct Answer: B

• Question 60:

  How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

  A. by creating an access policy

  B. through a policy-based redirect (PBR)

  C. contracts between EPGs that send traffic to the firewall using a shared policy

  D. through a virtual machine monitor (VMM) domain

  Correct Answer: C