PSE-StrataDC Actual Questions - Instant Download 60 Questions
Download Free Latest Exam PSE-StrataDC Certified Sample Questions
Palo Alto Networks PSE-StrataDC (Palo Alto Networks System Engineer Professional - Strata Data Center) Exam is designed for IT professionals who are interested in validating their knowledge and skills related to the deployment and management of Palo Alto Networks technologies in a data center environment. Palo Alto Networks System Engineer Professional - Strata Data Center certification exam is specifically designed for system engineers and architects who work with Palo Alto Networks products and solutions.
NEW QUESTION # 34
Which interface mode does an administrator use to generate the statdump file that can be converted into an SLR? Assume that the administrator wants to make the evaluation as unintrusive as possible
- A. Virtual Wire
- B. Layer 2
- C. Layer 3
- D. TAP
Answer: D
NEW QUESTION # 35
Which are two use cases for HSCI ports on the SMC module on PA-7000 Series? (Choose two )
- A. HA1 backup link in active/active HA
- B. HA1 link in active/passive HA
- C. HA3 link in active/active HA
- D. HA2 link in active/passive HA
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/hardware/pa-7000-hardware-reference/pa-7000-series-module-and-interface-c
NEW QUESTION # 36
What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager?
(Choose three.)
- A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls
- B. The deployed VM-Series firewall can establish communications with Panorama.
- C. Panorama has been configured to recognize both the NSX Manager and vCenter.
- D. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment
- E. Panorama can establish communications to the public Palo Alto Networks update servers.
Answer: A,C,E
NEW QUESTION # 37
A company allows employees some personal use of the internet during work time However the CEO is concerned that employees are using too much of the bandwidth for YouTube. thus causing a performance problem. Which section of the SLR could confirm or allay this concern?
- A. Categories Consuming the Most Bandwidth
- B. High-Risk Applications
- C. Categories with the Most Applications
- D. Bandwidth Consumed by Applications
Answer: A
NEW QUESTION # 38
A customer wants to completely segment their internal networks They have Cisco switches and extensively use 10Gbps interfaces. They are running VMware ESXi and are considering implementing NSX. Which three Palo Alto Networks firewall models will support this deployment? (Choose three.)
- A. VM-100
- B. PA-3050
- C. VM-300
- D. PA-3250
- E. PA-7050
Answer: B,D,E
NEW QUESTION # 39
Which environment is least likely to be placed on a public cloud by a hospital that has a large health information management application?
- A. QA
- B. production
- C. development
- D. testing
Answer: C
NEW QUESTION # 40
In which two ways can micro-segmentation save money for the enterprise? (Choose two.)
- A. fewer capital expenses because fewer physical servers need to be bought
- B. fewer operating expenses because less public cloud capacity needs to be rented
- C. fewer operating expenses because a smaller data center is operated
- D. fewer capital expenses because the same number of physical servers can be kept in a smaller space
Answer: A,B
NEW QUESTION # 41
What are the benefits of NSX-V?
- A. sturdier centralized management; automated deployment ease in administering tenants and dedicated compute infrastructure; tighter integration between virtual environment and security enforcement of dynamic security
- B. virt-manager wizard to help with the installation process; virsh command to deploy the VM-Series; virt-installcommand to install
- C. supports the Data Plane Development Kit (DPDK) libraries; enables Stackdnver Monitoring on the VMware Series Firewall; works with Cloud Launcher
- D. leverages Prism Central
Answer: C
NEW QUESTION # 42
Whichconfiguration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?
- A. Create security groups and use them in an NSX-to-Palo Alto Networks redirection policy.
- B. Create security groups with tags marked as shareable.
- C. Create security groups and mark them as exchangeable.
- D. Create security groups only.
Answer: D
NEW QUESTION # 43
Which two OpenStack components areused in the creation of a VM-Series firewall from a heat template in OpenStack? (Choose two )
- A. Swift creates the storage resources.
- B. Horizon
- C. Nova creates the firewall instance.
- D. Neutron creates the network resources.
Answer: A,B
NEW QUESTION # 44
Which protocol is used by VMware to encapsulate packets in NSX?
- A. VRLAN
- B. VXLAN
- C. GRE
- D. VMLAN
Answer: B
NEW QUESTION # 45
Which two options describe use cases of internal and external tags in Panorama? (Choose two.)
- A. rule grouping
- B. Dynamic Address Group membership
- C. device group membership
- D. template membership
Answer: B,C
NEW QUESTION # 46
Which three steps are valid for deploying a VM-Series firewall on NSX? (Choose three )
- A. register the VM-Series firewall as a service
- B. create steering policies to redirect traffic to the VM-Series firewall
- C. obtain the AMI from market place
- D. create a vDC and a vApp that includes the VM-Series firewall
- E. enable communication between Panorama and the NSX Manager
Answer: A,B,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-vmwar
NEW QUESTION # 47
Which type of cloud service can be protected by an inline firewall controlled by the organization rather than by the cloud provider?
- A. laaS
- B. SaaS
- C. FaaS
- D. PaaS
Answer: A
NEW QUESTION # 48
How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?
- A. contracts between EPGs that send traffic to the firewall using a shared policy
- B. by creating an access policy
- C. through a policy-based redirect (PBR)
- D. through a virtual machine monitor (VMM) domain
Answer: A
NEW QUESTION # 49
When deploying VM series on Openstack platform, which statement is correct?
- A. Set Instance type OS::Nova Server
- B. OpenStack compute node could be installed on a hypervisor platform
- C. Accept the VM-Series OVA image
- D. Allow configuration of at least one interface
Answer: B
NEW QUESTION # 50
Which interface mode do you use to generate the statdump file that can be converted into an SLR? Assume that the SE wants to make the evaluation as unintrusive as possible.
- A. Virtual Wire
- B. Layer 2
- C. Layer 3
- D. TAP
Answer: D
NEW QUESTION # 51
Which three criteria are required to deploy VM-Series firewalls in High Availability? (Choose three)
- A. deployed on same type of hypervisor
- B. deployed on a different host
- C. configured asymmetric routing
- D. assigned identical licenses and subscriptions
- E. allocate identical CPU cores and network interfaces
Answer: A,D,E
Explanation:
Explanation
In an HA configuration on the VM-Series firewalls, both peers must be deployed on the same type of hypervisor, have identical hardware resources (such as CPU cores/network interfaces) assigned to them, and have the set same of licenses/subscriptions.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/vm-series-i
NEW QUESTION # 52
For which two reasons would an administrator have to install NGFW automatically in a cloud environment?
{Choose two )
- A. performance, to be able to install a new firewall when the demand exceeds the ability of the existing environments to service
- B. resiliency and availability, to be able to install a new firewall as part of a new environment if an existing environment fails
- C. integrity, to ensure that data is not changed illicitly
- D. security, to automatically install a firewall when a security threat is detected
- E. reduce capital expenses
Answer: A,D
NEW QUESTION # 53
......
To prepare for the PSE-StrataDC certification exam, candidates can take advantage of the training and resources provided by Palo Alto Networks. Palo Alto Networks offers online training courses, instructor-led courses, and study guides to help candidates prepare for the exam. Additionally, there are many online resources available, such as forums and study groups, where candidates can connect with other professionals preparing for the exam and share study materials and tips.
Free Palo Alto Networks PSE-StrataDC Exam 2023 Practice Materials Collection: https://www.surepassexams.com/PSE-StrataDC-exam-bootcamp.html