Free Palo Alto Networks System Engineer – Strata Data Center Exam PSE-StrataDC Exam Practice Test

Which three software components have integration for deploying a VM-Series firewall in OpenStack? (Choose three)

• Mirantis OpenStack distribution B. Nuage VSP SDN controller C. VMWare NSX for OpenStack D. Cisco ACI E. Contrail SDN controller
• Nuage VSP SDN controller
• VMWare NSX for OpenStack
• Cisco ACI
• Contrail SDN controller

In which two ways can micro-segmentation save money for the enterprise? (Choose two.)

• fewer capital expenses because fewer physical servers need to be bought B. fewer operating expenses because a smaller data center is operated C. fewer operating expenses because less public cloud capacity needs to be rented D. fewer capital expenses because the same number of physical servers can be kept in a smaller space
• fewer operating expenses because a smaller data center is operated
• fewer operating expenses because less public cloud capacity needs to be rented
• fewer capital expenses because the same number of physical servers can be kept in a smaller space

A network administrator is working on a VMware NSX installation with VM-1000-HV firewalls The administrator has created a security group that is populated with VMs The administrator is trying to create a Dynamic Address Group in Panorama, but the security group is not showing. Which task should the administrator perform first?

• Go into vCenter/NSX and push the objects to Panorama B. Delete and re-add the security group. C. Go into Panorama and synchronize the Address objects with NSX D. Check the NSX Security policy to ensure the security group has been used in a policy.
• Delete and re-add the security group.
• Go into Panorama and synchronize the Address objects with NSX
• Check the NSX Security policy to ensure the security group has been used in a policy.

What is the primary operational benefit of a managed Kubernetes service from a Cloud Service Provider?

• reduced complexity, alleviates the need to run masters B. less expensive, typically offered at a lower cost than running containers on a VM C. more powerful, offers more configuration options than running your own distribution of Kubernetes D. increased visibility, provides more insight into application usage than what is natively available
• less expensive, typically offered at a lower cost than running containers on a VM
• more powerful, offers more configuration options than running your own distribution of Kubernetes
• increased visibility, provides more insight into application usage than what is natively available

Which task is required to create steering rules on NSX-V Manager?

• Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required details B. Configure the rule in Panorama and push it to NSX-V Manager. C. Select Fabric > Access Policies > Quick Start and follow the prompts D. Add a network introspective service and select Redirect to Service under Action.
• Configure the rule in Panorama and push it to NSX-V Manager.
• Select Fabric > Access Policies > Quick Start and follow the prompts
• Add a network introspective service and select Redirect to Service under Action.

What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three.)

• vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls B. The deployed VM-Series firewall can establish communications with Panorama. C. Panorama has been configured to recognize both the NSX Manager and vCenter. D. Panorama can establish communications to the public Palo Alto Networks update servers. E. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment
• The deployed VM-Series firewall can establish communications with Panorama.
• Panorama has been configured to recognize both the NSX Manager and vCenter.
• Panorama can establish communications to the public Palo Alto Networks update servers.
• The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment

A customer in a non-NSX VMware environment wantsto add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security. How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

• Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch B. Edit the IP address of all of the affected VMs C. Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway D. Create a Layer 3 interface in the same subnet as the VMs and configure proxy ARP
• Edit the IP address of all of the affected VMs
• Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway
• Create a Layer 3 interface in the same subnet as the VMs and configure proxy ARP

Which environment is least likely to be placed on a public cloud by a hospital that has a large health information management application?

• production B. development C. testing D. QA
• development
• testing
• QA

How does Palo Alto Networks integrate with VXLAN tagging?

• does not integrate with VXLAN tagging, so virtual appliances cannot be provided, but hardware appliances can be offered at the data center gateway border B. integrates with VXLAN. but scripting is necessary, and Professional Services should be engaged C. integrates fully into VXLAN architectures if they are provided by VMware D. does not integrate natively with VXLAN tagging, network equipment can convert VXLAN flows to VLANs and send those VLANs to Palo Alto Networks firewalls
• integrates with VXLAN. but scripting is necessary, and Professional Services should be engaged
• integrates fully into VXLAN architectures if they are provided by VMware
• does not integrate natively with VXLAN tagging, network equipment can convert VXLAN flows to
• VLANs and send those VLANs to Palo Alto Networks firewalls

Which three steps are valid for deploying a VM-Series firewall on NSX? (Choose three )

• create steering policies to redirect traffic to the VM-Series firewall B. create a vDC and a vApp that includes the VM-Series firewall C. register the VM-Series firewall as a service D. obtain the AMI from market place E. enable communication between Panorama and the NSX Manager
• create a vDC and a vApp that includes the VM-Series firewall
• register the VM-Series firewall as a service
• obtain the AMI from market place
• enable communication between Panorama and the NSX Manager