Free PSE Professional Accreditation-Data Center Exam PSE-DataCenter Exam Practice Test

Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

• WildFire on the firewall, and AutoFocus on Panorama
• URL Filtering on the firewall, and MindMeld on Panorama
• Threat Prevention on the firewall, and Support on Panorama
• GlobalProtect on the firewall, and Threat Prevention on Panorama

What is the result of deploying virtualization in your data center?

• reduced security threat
• reduced operational costs
• increased hardware capital costs
• increased host provisioning

By increasing the number of vCPUs in a VM - Series firewall from 4 to 8, by what factor is performance expected to increase?

• By a pproximately a factor of 2
• By a pp roximately a factor of 1.8
• By a pproximately a factor of 2.2
• Performance will not increase

Which statement is true regarding the HA3 interface on VM - Series firewalls in an HA configuration?

• The second VM - Series firewall should be in a different host and the HA3 connection should be over a dedicated high - speed link .
• The second VM - Series firewall should be in the same virtual machine so the HA3 connection does not have to travel over a physical connection .
• The HA3 connection should traverse no more than a single virtual switch.
• There is no HA3 connection on a VM - Series firewall.

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

• Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance
• Palo Alto Networks AutoFocus generated Correlation Objects
• Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles
• WF-500 configured as private clouds for privacy concerns
• Palo Alto Networks non-firewall products, like Traps and Aperture

In addition to the expanded capacity for NPCs, what else is improved in the PA - 7080 over the PA - 7050?

• A second LPC is standard.
• A second SMC is standard.
• Front - to - back airflow is standard.
• Available 100Gb p s interfaces , but only with PAN - OS 7.0 and higher

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

• Define a custom App-ID to ensure that only legitimate application traffic reaches the server
• Add a DoS Protection Profile with defined session count.
• Add a Vulnerability Protection Profile to block the attack.
• Add QoS Profiles to throttle incoming requests.

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.Which VPN configuration would adapt to changes when deployed to the future site?

• Preconfigured GlobalProtect satellite
• Preconfigured GlobalProtect client
• Preconfigured IPsec tunnels
• Preconfigured PPTP Tunnels

What is the maximum number of QSFP+ interfaces that can be supported in a PA - 7080, and what is the minimum version of PAN - OS required to support them?

• 12, PAN - OS 6.0
• 12, PAN - OS 6.1
• 12, PAN - OS 7.0
• 20, PAN - OS 6.0
• 20, PAN - OS 6.1
• 20, PAN - OS 7.0

Which of these statements is true about Dynamic Address Groups?

• T hey allow you to create a policy that automatically adapts to changes — adds, moves, or deletions of servers.
• They enable the flexibility to apply different rules to th e same server based on tagsthat define its role on the network, the operating system, or the different kinds of traffic it processes.
• A dynamic address group uses tags as a filtering criterion to determine its members.
• The filtering criteria uses logical and , or , and not operators.