PSE-StrataDC Practice Exam Questions with Answers Palo Alto Networks System Engineer Professional - Strata Data Center Certification

VM-Series uses NetX API to receive and send packets

Traffic steering rules could be defined on Panorama and pushed to NSX Manager

VM-Series provide Multi-tenancy support with multiple zones

One panorama could support to connect with only one NSX manager

Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required details

Configure the rule in Panorama and push it to NSX-V Manager.

Select Fabric > Access Policies > Quick Start and follow the prompts

Add a network introspective service and select Redirect to Service under Action.

create steering policies to redirect traffic to the VM-Series firewall

create a vDC and a vApp that includes the VM-Series firewall

register the VM-Series firewall as a service

obtain the AMI from market place

enable communication between Panorama and the NSX Manager

Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.

Prisma Cloud Enterprise provides workload protection through integration with the NGFW.

Prisma Cloud Compute offers agentless protection for all workload types.

Prisma Cloud Enterprise does not offer workload protection because it is a SaaS based product and agentless

bootstrap files including init-cfg.txt. bootstrap.xml, and VM-Series auth codes

a valid VM-Series gcow2 image

Hypervisor: ESX

a valid OpenStack heat template in json format

a valid vmseries vhd image

a valid OpenStack heat template in yaml format

Virtual Wire

TAP

Layer 2

Layer 3

When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed, provisioned and available for immediate policy enforcement without any little manual intervention

When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed, provisioned and available for immediate policy enforcement without any manual intervention

When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed provisioned and after manually retrieving licenses available for immediate policy enforcement.

When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed and after manually adding licenses available for policy enforcement

production

development

testing

QA

HA1 backup link in active/active HA

HA1 link in active/passive HA

HA3 link in active/active HA

HA2 link in active/passive HA

can use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

can use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

can use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

can use a specialized VM with advanced threat protection for this requirement

Arista and VMware are extending secure segmentation with an open API (RESTZJSON)-based exchange, which allows NSX to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

Arista and Kubernetes are extending secure segmentation with an open API (RESTVJSON)-based exchange, which allows Kubernetes to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

Arista's micro-segmentation and macro-segmentation are identical concepts that can be used interchangeably

Arista and VMware both perform identical functions for NGFW micro-segmentation

Hash

Egress-Slot

Round Robin

Ingress-Slot

VRRP

HSRP

floating IP address

ARP load sharing