PSE-STRATADC Online Practice Questions and Answers

Whichthree deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three)

A. Partner Service

B. Boot Strap

C. Prism Central

D. Tier-1 insertion

E. Tier-0 insertion

Which three components are relevant for installing a VM-Series firewall in an OpenStack environment? (Choose three)

A. bootstrap files including init-cfg.txt. bootstrap.xml, and VM-Series auth codes

B. a valid VM-Series gcow2 image

C. Hypervisor: ESX

D. a valid OpenStack heat template in json format

E. a valid vmseries vhd image

F. a valid OpenStack heat template in yaml format

Which configuration is requiredto share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

A. notify device groups within VMware Services Manager

B. a User-ID agent on a Windows domain server

C. VMware Information Sources

D. none, sharing happens by default

Which protocol is used by VMware to encapsulate packets in NSX?

A. VRLAN

B. VXLAN

C. GRE

D. VMLAN

How do Palo Alto Networks NGFWs integrate with an ACI architecture?

A. SDN code hooks can help to detonate malicious file samples designed to detect virtual environments

B. Traffic can be automatically redirected using static Address objects.

C. VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.

D. Controllers can program firewalls using a REST-based API.

How does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies on demand? (Choose two)

A. Aperture Orchestration Engine (AOE)

B. Support for Dynamic Address Groups

C. Fully instrumented API

D. VM Orchestration Policy Editor

For which two reasons would an administrator have to install NGFW automatically in a cloud environment? (Choose two)

A. reduce capital expenses

B. performance, to be able to install a new firewall when the demand exceeds the ability of the existing environments to service C. integrity, to ensure that data is not changed illicitly

D. resiliency and availability, to be able to install a new firewall as part of a new environment if an existing environment fails

E. security, to automatically install a firewall when a security threat is detected

What are the differences between Prisma Cloud Enterprise and Prisma Cloud Compute?

A. The only difference is in the architecture - where the Console is hosted.

B. Prisma Cloud Compute offers lowered runtime defensive capabilities because there is no PANW cloud hosted component.

C. Prisma Cloud Enterprise does not offer workload protection.

D. Only Prisma Cloud Compute offers API based cloud protection.