PSE-STRATADC Online Practice Questions and Answers

How are workloads protected in Prisma Cloud Enterprise and Prisma Cloud Compute''?

A. Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.

B. Prisma Cloud Enterprise provides workload protection through integration with the NGFW.

C. Prisma Cloud Compute offers agentless protection for all workload types.

D. Prisma Cloud Enterprise does not offer workload protection because it is a SaaS based product and agentless.

In which two ways can micro-segmentation save money for the enterprise? (Choose two)

A. fewer capital expenses because fewer physical servers need to be bought

B. fewer operating expenses because a smaller data center is operated

C. fewer operating expenses because less public cloud capacity needs to be rented

D. fewer capital expenses because the same number of physical servers can be kept in a smaller space

Which protocol is used by VMware to encapsulate packets in NSX?

A. VRLAN

B. VXLAN

C. GRE

D. VMLAN

How does Palo Alto Networks integrate with VXLAN tagging?

A. does not integrate with VXLAN tagging, so virtual appliances cannot be provided, but hardware appliances can be offered at the data center gateway border

B. integrates with VXLAN. but scripting is necessary, and Professional Services should be engaged

C. integrates fully into VXLAN architectures if they are provided by VMware

D. does not integrate natively with VXLAN tagging, network equipment can convert VXLAN flows to VLANs and send those VLANs to Palo Alto Networks firewalls

When deploying VM series on Openstack platform, which statement is correct?

A. Allow configuration of at least one interface

B. OpenStack compute node could be installed on a hypervisor platform

C. Accept the VM-Series OVA image

D. Set Instance type OS::Nova Server

Is vulnerability analysis against images in the registry sufficient for security?

A. Yes, containers do not have unique vulnerabilities.

B. No, you should do vulnerability analysis only against the running containers, which are vulnerable.

C. Yes, you are ensuring that the images the containers are based on are secure.

D. No, you need to do analysis in the CI system, in the registry, and against instantiated containers

Which two options describe use cases of internal and external tags in Panorama? (Choose two)

A. device group membership

B. template membership

C. Dynamic Address Group membership

D. rule grouping

In the following scenario, Route-based firewall redundancy is deployed in a Data Center, which statement is true?

A. IP addresses of Firewall interfaces will move between devices when a firewall fails.

B. The 2 firewalls are in Active-Standby HA status.

C. Firewalls use dynamic routing protocols to determine the best path.

D. Floating IP addresses are necessary for HA configuration.

What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three)

A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls.

B. The deployed VM-Series firewall can establish communications with Panorama.

C. Panorama has been configured to recognize both the NSX Manager and vCenter.

D. Panorama can establish communications to the public Palo Alto Networks update servers.

E. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment.

For which two reasons would an administrator have to install NGFW automatically in a cloud environment? (Choose two)

A. reduce capital expenses

B. performance, to be able to install a new firewall when the demand exceeds the ability of the existing environments to service C. integrity, to ensure that data is not changed illicitly

D. resiliency and availability, to be able to install a new firewall as part of a new environment if an existing environment fails

E. security, to automatically install a firewall when a security threat is detected