Palo Alto Networks PSE-StrataDC Exam Questions - Real Practice Questions for Guaranteed Success

Question 1

Which configuration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?

ACreate security groups only.

BCreate security groups and mark them as exchangeable.

CCreate security groups with tags marked as shareable.

DCreate security groups and use them in an NSX-to-Palo Alto Networks redirection policy.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ACreate security groups only.

BCreate security groups and mark them as exchangeable.

CCreate security groups with tags marked as shareable.

DCreate security groups and use them in an NSX-to-Palo Alto Networks redirection policy.

0 / 1500

Question 2

How does the Palo Alto Networks NGFW integrate with Arista Networks Macro-Segmentation Service?

AArista supports all hardware models of the Palo Alto Networks NGFW natively.

BArista allows standalone non-HA firewalls to be attached to a service leaf switch. You must configure an Elastic Load Balancer to obtain fault tolerance.

CArista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

DArista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AArista supports all hardware models of the Palo Alto Networks NGFW natively.

BArista allows standalone non-HA firewalls to be attached to a service leaf switch. You must configure an Elastic Load Balancer to obtain fault tolerance.

CArista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

DArista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls

0 / 1500

Question 3

In which two ways can micro-segmentation save money for the enterprise? (Choose two.)

Afewer capital expenses because fewer physical servers need to be bought

Bfewer operating expenses because a smaller data center is operated

Cfewer operating expenses because less public cloud capacity needs to be rented

Dfewer capital expenses because the same number of physical servers can be kept in a smaller space

Correct : A, C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

Afewer capital expenses because fewer physical servers need to be bought

Bfewer operating expenses because a smaller data center is operated

Cfewer operating expenses because less public cloud capacity needs to be rented

Dfewer capital expenses because the same number of physical servers can be kept in a smaller space

0 / 1500

Question 4

Which two methods provide a virtual IP address when implementing active/active HA? (Choose two )

AVRRP

BHSRP

Cfloating IP address

DARP load sharing

Correct : C, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AVRRP

BHSRP

Cfloating IP address

DARP load sharing

0 / 1500

Question 5

In the following scenario, Route-based firewall redundancy is deployed in a Data Center, which statement is true?

AIP addresses of Firewall interfaces will move between devices when a firewall fails

BThe 2 firewalls are in Active-Standby HA status

CFirewalls use dynamic routing protocols to determine the best path

DFloating IP addresses are necessary for HA configuration

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AIP addresses of Firewall interfaces will move between devices when a firewall fails

BThe 2 firewalls are in Active-Standby HA status

CFirewalls use dynamic routing protocols to determine the best path

DFloating IP addresses are necessary for HA configuration

0 / 1500

Master Palo Alto Networks PSE-StrataDC Exam with Reliable Practice Questions

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: