Paloalto Networks PSE-StrataDC Palo Alto Networks System Engineer Professional - Strata Data Center Web: www.solution2pass.com Version: Demo Email: support@solution2pass.com [ Total Questions: 10] IMPORTANT NOTICE Feedback We have developed quality product and state-of-art service to ensure our customers interest. If you have any suggestions, please feel free to contact us at feedback@solution2pass.com Support If you have any questions about our product, please provide the following items: exam code screenshot of the question login id/email please contact us at support@solution2pass.com and our technical experts will provide support within 24 hours. Copyright The product of each order has its own encryption code, so you should use it independently. Any unauthorized changes will inflict legal punishment. We reserve the right of final explanation for this statement. Pass Guaranteed Paloalto Networks - PSE-StrataDC Question #:1 What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three.) A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls B. The deployed VM-Series firewall can establish communications with Panorama. C. Panorama has been configured to recognize both the NSX Manager and vCenter. D. Panorama can establish communications to the public Palo Alto Networks update servers. E. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment Answer: A C D Question #:2 Which type of cloud service can be protected by an inline firewall controlled by the organization rather than by the cloud provider? A. SaaS B. laaS C. PaaS D. FaaS Answer: B Question #:3 What are the differences between Prisma Cloud Enterprise and Prisma Cloud Compute A. The only difference is in the architecture - where the Console is hosted B. Prisma Cloud Compute offers lowered runtime defensive capabilities because there is no PANW cloud hosted component. C. Prisma Cloud Enterprise does not offer workload protection. D. Only Prisma Cloud Compute offers API based cloud protection. Answer: C Only Solution2Pass for Any Exam 1 of 6 Pass Guaranteed Paloalto Networks - PSE-StrataDC Question #:4 Which is not a SaaS product? A. Yahoo Maps B. Microsoft Office 365 C. Microsoft Azure D. Google Docs Answer: C Question #:5 How are workloads protected in Prisma Cloud Enterprise and Prisma Cloud Compute'' A. Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities. B. Prisma Cloud Enterprise provides workload protection through integration with the NGFW. C. Prisma Cloud Compute offers agentless protection for all workload types. D. Prisma Cloud Enterprise does not offer workload protection because it is a SaaS based product and agentless Answer: A Question #:6 In PAN-OS, which three NSX features can be pushed from Panorama? (Choose three ) A. user IP mappings B. steering rules C. multiple authorization codes D. security group assignments of VMs E. security groups Answer: A C E Question #:7 Whichthree deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three ) Only Solution2Pass for Any Exam 2 of 6 Pass Guaranteed Paloalto Networks - PSE-StrataDC A. Partner Service B. Boot Strap C. Prism Central D. Tier-1 insertion E. Tier-0 insertion Answer: A D E Explanation https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-nsx/set-up-the You can deploy one or more instances of the VM-Series firewall as a partner service in your VMware NSX-T Data Center. Attach a VM-Series firewall to any tier-0 or tier-1 logical router to protect north-south traffic. You can deploy the VM-Series firewall as standalone service instance or two firewalls in a high-availability (HA) pair. Panorama manages the connection with NSX-T Manager and the VM-Series firewalls deployed in your NSX-T software-defined datacenter. Only Solution2Pass for Any Exam 3 of 6 Pass Guaranteed Paloalto Networks - PSE-StrataDC Tier-0 Insertion—Tier-0 insertion deploys a VM-Series firewall to a tier-0 logical router, which processes traffic between logical and physical networks. When you deploy the VM-Series firewall with tier-0 insertion, NSX-T Manager uses the deployment information you configured on Panorama to attach a firewall to a tier-0 logical router in virtual wire mode. Tier-1 Insertion—Tier-1 insertion deploys a VM-Series firewall to a tier-1 logical router, which provides downlink connections to segments and uplink connection to tier-0 logical routers. NSX-T Manager attaches VM-Series firewalls deployed with tier-1 insertions to a tier-1 logical router in virtual wire mode. Only Solution2Pass for Any Exam 4 of 6 Pass Guaranteed Paloalto Networks - PSE-StrataDC After deploying the firewall, you configure traffic redirection rules that send traffic to the VM-Series firewall when crossing a tier-0 or tier-1 router. Security policy rules that you configure on Panorama are pushed to managed VM-Series firewalls and then applied to traffic passing through the firewall. Question #:8 In an overlay network model of an ACI architecture, which statement is correct? A. The Top of Rack (TOR) switch must be able to understand both the overlay and the underlay network. B. All forwarding lookups are done at the network controller. C. The network controller is responsible for setting up the overlay paths D. The underlay network must be Layer 3 only. Answer: A Question #:9 Which two design options address split-brain when configuring HA? (Choose two ) A. Send heartbeats across the HA2 interfaces. B. Bundle multiple interfaces in an Aggregated Interface Group and assign HA2. C. Use the heartbeat backup. D. Add a backup HA1 interface. Answer: C D Question #:10 Which features are included in the less-expensive license bundle meant for NSX? A. capacity license, premium support, a threat prevention subscription. and GlobalProtect B. capacity license and premium support C. capacity license, premium support and a threat prevention subscription D. capacity license and a threat prevention subscription Answer: B Explanation Only Solution2Pass for Any Exam 5 of 6 Pass Guaranteed Paloalto Networks - PSE-StrataDC https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/license-the-vm-series-firewall/license-typesvm Only Solution2Pass for Any Exam 6 of 6 About solution2pass.com solution2pass.com was founded in 2007. We provide latest & high quality IT / Business Certification Training Exam Questions, Study Guides, Practice Tests. We help you pass any IT / Business Certification Exams with 100% Pass Guaranteed or Full Refund. Especially Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. View list of all certification exams: All vendors We prepare state-of-the art practice tests for certification exams. You can reach us at any of the email addresses listed below. Sales: sales@solution2pass.com Feedback: feedback@solution2pass.com Support: support@solution2pass.com Any problems about IT certification or our products, You can write us back and we will get back to you within 24 hours.