Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ecus65

Paloalto Networks PSE-StrataDC - Palo Alto Networks System Engineer Professional - Strata Data Center

Paloalto Networks PSE-StrataDC Premium Access     Download Demo    
Page: 2 / 2
Total 60 questions

Which three steps are valid for deploying a VM-Series firewall on NSX? (Choose three )

A.

create steering policies to redirect traffic to the VM-Series firewall

B.

create a vDC and a vApp that includes the VM-Series firewall

C.

register the VM-Series firewall as a service

D.

obtain the AMI from market place

E.

enable communication between Panorama and the NSX Manager

How does Twistlock offer workload security at runtime?

A.

works with the IDP to identify over-privileged containers and services and restricts network access

B.

quarantines containers that demonstrate increased CPU and memory usage

C.

automatically patches vulnerabilities and compliance issues for every container and service

D.

builds a whitelist security model automatically for every container and service

Which two options describe use cases of internal and external tags in Panorama? (Choose two.)

A.

device group membership

B.

template membership

C.

Dynamic Address Group membership

D.

rule grouping

How does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies on demand? (Choose two.)

A.

Aperture Orchestration Engine (AOE)

B.

Support for Dynamic Address Groups

C.

Fully instrumented API

D.

VM Orchestration Policy Editor

Which three advantages of the Palo Alto Networks platform architecture are used to enable security orchestration in SDN? (Choose three )

A.

a full set of APIs enabling programmatic control of policy and configuration

B.

NVGRE support for advanced VLAN integration

C.

integration with leading orchestration platforms: VMware NSX. OpenStack. and Cisco ACI

D.

Dynamic Address Groups to adapt Security policies dynamically

E.

VXLAN support for network-layer abstraction

Which interface mode does an administrator use to generate the statdump file that can be converted into an SLR? Assume that the administrator wants to make the evaluation as unintrusive as possible

A.

Virtual Wire

B.

TAP

C.

Layer 2

D.

Layer 3

What is the major decision factor that customers use when selecting a managed container platform such as AS/EKS/GKE?

A.

licensing costs

B.

enhanced capabilities not available in vanilla K8s

C.

no need to manage containers, just the application code.

D.

reduced operational costs and management overhead

What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three.)

A.

vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls

B.

The deployed VM-Series firewall can establish communications with Panorama.

C.

Panorama has been configured to recognize both the NSX Manager and vCenter.

D.

Panorama can establish communications to the public Palo Alto Networks update servers.

E.

The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment