Free Palo Alto Networks System Engineer – Strata Data Center Exam PSE-StrataDC Exam Practice Test

Which two design options address split-brain when configuring HA? (Choose two )

• Send heartbeats across the HA2 interfaces.
• Bundle multiple interfaces in an Aggregated Interface Group and assign HA2.
• Use the heartbeat backup.
• Add a backup HA1 interface.

In an overlay network model of an ACI architecture, which statement is correct?

• The Top of Rack (TOR) switch must be able to understand both the overlay and the underlay network.B. All forwarding lookups are done at the network controller.C. The network controller is responsible for setting up the overlay pathsD. The underlay network must be Layer 3 only.
• All forwarding lookups are done at the network controller.
• The network controller is responsible for setting up the overlay paths
• The underlay network must be Layer 3 only.

How do Palo Alto Networks NGFWs integrate with an ACI architecture?

• SDN code hooks can help to detonate malicious file samples designed to detect virtual environmentsB. Traffic can be automatically redirected using static Address objects.C. VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.D. Controllers can program firewalls using a REST-based API.
• Traffic can be automatically redirected using static Address objects.
• VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.
• Controllers can program firewalls using a REST-based API.

Which interface mode do you use to generate the statdump file that can be converted into an SLR? Assume that the SE wants to make the evaluation as unintrusive as possible.

• Virtual WireB. Layer 2C. TAPD. Layer 3
• Layer 2
• TAP
• Layer 3

How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

• by creating an access policyB. through a policy-based redirect (PBR)C. contracts between EPGs that send traffic to the firewall using a shared policyD. through a virtual machine monitor (VMM) domain
• through a policy-based redirect (PBR)
• contracts between EPGs that send traffic to the firewall using a shared policy
• through a virtual machine monitor (VMM) domain

Which configuration is requiredto share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

• notify device groups within VMware Services ManagerB. a User-ID agent on a Windows domain serverC. VMware Information SourcesD. none, sharing happens by default
• a User-ID agent on a Windows domain server
• VMware Information Sources
• none, sharing happens by default

What is a company that is moving as much of its business as possible into Microsoft Azure trying to minimize?

• capital expensesB. operating expensesC. security exposureD. operating expenses and capital expenses
• operating expenses
• security exposure
• operating expenses and capital expenses

Is vulnerability analysis against images in the registry sufficient for security?

• Yes, containers do not have unique vulnerabilities.B. No, you should do vulnerability analysis only against the running containers, which are vulnerable.C. Yes, you are ensuring that the images the containers are based on are secure.D. No, you need to do analysis in the CI system, in the registry, and against instantiated containers
• No, you should do vulnerability analysis only against the running containers, which are vulnerable.
• Yes, you are ensuring that the images the containers are based on are secure.
• No, you need to do analysis in the CI system, in the registry, and against instantiated containers

Which task is required to create steering rules on NSX-V Manager?

• Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required detailsB. Configure the rule in Panorama and push it to NSX-V Manager.C. Select Fabric > Access Policies > Quick Start and follow the promptsD. Add a network introspective service and select Redirect to Service under Action.
• Configure the rule in Panorama and push it to NSX-V Manager.
• Select Fabric > Access Policies > Quick Start and follow the prompts
• Add a network introspective service and select Redirect to Service under Action.

Which two OpenStack components areused in the creation of a VM-Series firewall from a heat template in OpenStack? (Choose two )

• Swift creates the storage resources.B. Nova creates the firewall instance.C. HorizonD. Neutron creates the network resources.
• Nova creates the firewall instance.
• Horizon
• Neutron creates the network resources.