Question 1

Which is not a SaaS product?

Accepted Answer

C

Question 2

What is the default session distribution policy in the PA-7000 Series?

Accepted Answer

D

Explanation: ( PA-7000 Series firewalls only ) New sessions are assigned to a DP on the same NPC on which the first packet of the session arrived. The selection of the DP is based on the session-load algorithm but, in this case, sessions are limited to the DPs on the ingress NPC. Depending on the traffic and network topology, this policy generally decreases the odds that traffic will need to traverse the switch fabric. Use this policy to reduce latency if both ingress and egress are on the same NPC. If the firewall has a mix of NPCs (PA-7000 20G and PA-7000 20GXM for example), this policy can isolate the increased capacity to the corresponding NPCs and help to isolate the impact of NPC failures.

Question 3

In which two ways can micro-segmentation save money for the enterprise? (Choose two.)

Accepted Answer

Answer available on page.

Question 4

What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three.)

Accepted Answer

Answer available on page.

Question 5

Which environment is least likely to be placed on a public cloud by a hospital that has a large health information management application?

Accepted Answer

B

Question 6

When deploying VM series on Openstack platform, which statement is correct?

Accepted Answer

B

Explanation: :

Question 7

How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

Accepted Answer

C

Question 8

When deploying VM series on NSX platform to support micro-segmentation, which statement is NOT correct?

Accepted Answer

A

Question 9

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an
existing group of VMs in the same subnet into two groups. One group needs no additional security,
but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of
any of the guest VMs?

Accepted Answer

D

Question 10

How does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies on demand? (Choose two.)

Accepted Answer

Answer available on page.

Question 11

In a VMware deployment, in order for the customer to get maximum performance out of a VM-700 firewall in PAN-OS 8 x how many virtual CPU cores can be used?

Accepted Answer

A

Question 12

Which interface mode do you use to generate the statdump file that can be converted into an SLR? Assume that the SE wants to make the evaluation as unintrusive as possible.

Accepted Answer

C

Question 13

Which two design options address split-brain when configuring HA? (Choose two )

Accepted Answer

Answer available on page.

Question 14

Which protocol is used by VMware to encapsulate packets in NSX?

Accepted Answer

B

Question 15

Which three deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three )

Accepted Answer

Explanation: https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-seriesfirewall-on-nsx/set-up-the-vm-series-firewall-on-nsx-t/supported-deployments-of-the-vm-series- firewall-on-vmware-nsx-t.html You can deploy one or more instances of the VM-Series firewall as a partner service in your VMware NSX-T Data Center. Attach a VM-Series firewall to any tier-0 or tier-1 logical router to protect north- south traffic. You can deploy the VM-Series firewall as standalone service instance or two firewalls in a high-availability (HA) pair. Panorama manages the connection with NSX-T Manager and the VM- Series firewalls deployed in your NSX-T software-defined datacenter. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Palo_Alto_Networks_PSE-StrataDC/page_3_img_1.jpg Tier-0 Insertion—Tier-0 insertion deploys a VM-Series firewall to a tier-0 logical router, which processes traffic between logical and physical networks. When you deploy the VM-Series firewall with tier-0 insertion, NSX-T Manager uses the deployment information you configured on Panorama to attach a firewall to a tier-0 logical router in virtual wire mode. Tier-1 Insertion—Tier-1 insertion deploys a VM-Series firewall to a tier-1 logical router, which provides downlink connections to segments and uplink connection to tier-0 logical routers. NSX-T Manager attaches VM-Series firewalls deployed with tier-1 insertions to a tier-1 logical router in virtual wire mode. After deploying the firewall, you configure traffic redirection rules that send traffic to the VM-Series firewall when crossing a tier-0 or tier-1 router. Security policy rules that you configure on Panorama are pushed to managed VM-Series firewalls and then applied to traffic passing through the firewall.

Free PSE-StrataDC Actual Exam Questions