PSE-StrataDC Exam Dumps - Palo Alto Networks System Engineer Professional - Strata Data Center

Go to page:

Question # 4

Which feature removes the limitation of requiring the first interface to be management?

Management interface swap

Utilize a separate Load Balancer VM

Utilize a separate NAT VM.

Dataport interface switch

Full Access

Question # 5

How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

by creating an access policy

through a policy-based redirect (PBR)

contracts between EPGs that send traffic to the firewall using a shared policy

through a virtual machine monitor (VMM) domain

Full Access

Question # 6

Which two options describe use cases of internal and external tags in Panorama? (Choose two.)

device group membership

template membership

Dynamic Address Group membership

rule grouping

Full Access

Question # 7

What is a company that is moving as much of its business as possible into Microsoft Azure trying to minimize?

capital expenses

operating expenses

security exposure

operating expenses and capital expenses

Full Access

Question # 8

A customer in a non-NSX VMware environment wantsto add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch

Edit the IP address of all of the affected VMs

Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway

Create a Layer 3 interface in the same subnet as the VMs and configure proxy ARP

Full Access

Go to page: