Uploaded by Hank Fried

Paloalto Networks PSE-StrataDC Practice Test

advertisement
Paloalto Networks
PSE-StrataDC
Palo Alto Networks System Engineer Professional
- Strata Data Center
Web: www.solution2pass.com
Version: Demo
Email: support@solution2pass.com
[ Total Questions: 10]
IMPORTANT NOTICE
Feedback
We have developed quality product and state-of-art service to ensure our customers interest. If you have any
suggestions, please feel free to contact us at feedback@solution2pass.com
Support
If you have any questions about our product, please provide the following items:
exam code
screenshot of the question
login id/email
please contact us at support@solution2pass.com and our technical experts will provide support within 24 hours.
Copyright
The product of each order has its own encryption code, so you should use it independently. Any unauthorized
changes will inflict legal punishment. We reserve the right of final explanation for this statement.
Pass Guaranteed
Paloalto Networks - PSE-StrataDC
Question #:1
What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager?
(Choose three.)
A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls
B. The deployed VM-Series firewall can establish communications with Panorama.
C. Panorama has been configured to recognize both the NSX Manager and vCenter.
D. Panorama can establish communications to the public Palo Alto Networks update servers.
E. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment
Answer: A C D
Question #:2
Which type of cloud service can be protected by an inline firewall controlled by the organization rather than
by the cloud provider?
A. SaaS
B. laaS
C. PaaS
D. FaaS
Answer: B
Question #:3
What are the differences between Prisma Cloud Enterprise and Prisma Cloud Compute
A. The only difference is in the architecture - where the Console is hosted
B. Prisma Cloud Compute offers lowered runtime defensive capabilities because there is no PANW cloud
hosted component.
C. Prisma Cloud Enterprise does not offer workload protection.
D. Only Prisma Cloud Compute offers API based cloud protection.
Answer: C
Only Solution2Pass for Any Exam
1 of 6
Pass Guaranteed
Paloalto Networks - PSE-StrataDC
Question #:4
Which is not a SaaS product?
A. Yahoo Maps
B. Microsoft Office 365
C. Microsoft Azure
D. Google Docs
Answer: C
Question #:5
How are workloads protected in Prisma Cloud Enterprise and Prisma Cloud Compute''
A. Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.
B. Prisma Cloud Enterprise provides workload protection through integration with the NGFW.
C. Prisma Cloud Compute offers agentless protection for all workload types.
D. Prisma Cloud Enterprise does not offer workload protection because it is a SaaS based product and
agentless
Answer: A
Question #:6
In PAN-OS, which three NSX features can be pushed from Panorama? (Choose three )
A. user IP mappings
B. steering rules
C. multiple authorization codes
D. security group assignments of VMs
E. security groups
Answer: A C E
Question #:7
Whichthree deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three )
Only Solution2Pass for Any Exam
2 of 6
Pass Guaranteed
Paloalto Networks - PSE-StrataDC
A. Partner Service
B. Boot Strap
C. Prism Central
D. Tier-1 insertion
E. Tier-0 insertion
Answer: A D E
Explanation
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-nsx/set-up-the
You can deploy one or more instances of the VM-Series firewall as a partner service in your VMware NSX-T
Data Center. Attach a VM-Series firewall to any tier-0 or tier-1 logical router to protect north-south traffic.
You can deploy the VM-Series firewall as standalone service instance or two firewalls in a high-availability
(HA) pair. Panorama manages the connection with NSX-T Manager and the VM-Series firewalls deployed in
your NSX-T software-defined datacenter.
Only Solution2Pass for Any Exam
3 of 6
Pass Guaranteed
Paloalto Networks - PSE-StrataDC
Tier-0 Insertion—Tier-0 insertion deploys a VM-Series firewall to a tier-0 logical router, which
processes traffic between logical and physical networks. When you deploy the VM-Series firewall with
tier-0 insertion, NSX-T Manager uses the deployment information you configured on Panorama to
attach a firewall to a tier-0 logical router in virtual wire mode.
Tier-1 Insertion—Tier-1 insertion deploys a VM-Series firewall to a tier-1 logical router, which
provides downlink connections to segments and uplink connection to tier-0 logical routers. NSX-T
Manager attaches VM-Series firewalls deployed with tier-1 insertions to a tier-1 logical router in virtual
wire mode.
Only Solution2Pass for Any Exam
4 of 6
Pass Guaranteed
Paloalto Networks - PSE-StrataDC
After deploying the firewall, you configure traffic redirection rules that send traffic to the VM-Series firewall
when crossing a tier-0 or tier-1 router. Security policy rules that you configure on Panorama are pushed to
managed VM-Series firewalls and then applied to traffic passing through the firewall.
Question #:8
In an overlay network model of an ACI architecture, which statement is correct?
A. The Top of Rack (TOR) switch must be able to understand both the overlay and the underlay network.
B. All forwarding lookups are done at the network controller.
C. The network controller is responsible for setting up the overlay paths
D. The underlay network must be Layer 3 only.
Answer: A
Question #:9
Which two design options address split-brain when configuring HA? (Choose two )
A. Send heartbeats across the HA2 interfaces.
B. Bundle multiple interfaces in an Aggregated Interface Group and assign HA2.
C. Use the heartbeat backup.
D. Add a backup HA1 interface.
Answer: C D
Question #:10
Which features are included in the less-expensive license bundle meant for NSX?
A. capacity license, premium support, a threat prevention subscription. and GlobalProtect
B. capacity license and premium support
C. capacity license, premium support and a threat prevention subscription
D. capacity license and a threat prevention subscription
Answer: B
Explanation
Only Solution2Pass for Any Exam
5 of 6
Pass Guaranteed
Paloalto Networks - PSE-StrataDC
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/license-the-vm-series-firewall/license-typesvm
Only Solution2Pass for Any Exam
6 of 6
About solution2pass.com
solution2pass.com was founded in 2007. We provide latest & high quality IT / Business Certification Training Exam
Questions, Study Guides, Practice Tests.
We help you pass any IT / Business Certification Exams with 100% Pass Guaranteed or Full Refund. Especially
Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on.
View list of all certification exams: All vendors
We prepare state-of-the art practice tests for certification exams. You can reach us at any of the email addresses listed
below.
Sales: sales@solution2pass.com
Feedback: feedback@solution2pass.com
Support: support@solution2pass.com
Any problems about IT certification or our products, You can write us back and we will get back to you within 24
hours.
Download