Free Practice Questions for Palo Alto Networks PSE-StrataDC Exam

Question 1

Which configuration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?

ACreate security groups only.

BCreate security groups and mark them as exchangeable.

CCreate security groups with tags marked as shareable.

DCreate security groups and use them in an NSX-to-Palo Alto Networks redirection policy.

Correct Answer: A. Create security groups only.

Question 2

How are workloads protected in Prisma Cloud Enterprise and Prisma Cloud Compute''

APrisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.

BPrisma Cloud Enterprise provides workload protection through integration with the NGFW.

CPrisma Cloud Compute offers agentless protection for all workload types.

DPrisma Cloud Enterprise does not offer workload protection because it is a SaaS based product and agentless

Correct Answer: A. Prisma Cloud enterprise and Prisma Cloud Computes provides identical workload capabilities.

Question 3

How does Palo Alto Networks integrate with VXLAN tagging?

Adoes not integrate with VXLAN tagging, so virtual appliances cannot be provided, but hardware appliances can be offered at the data center gateway border

Bintegrates with VXLAN. but scripting is necessary, and Professional Services should be engaged

Cintegrates fully into VXLAN architectures if they are provided by VMware

Ddoes not integrate natively with VXLAN tagging, network equipment can convert VXLAN flows to VLANs and send those VLANs to Palo Alto Networks firewalls

Correct Answer: C. integrates fully into VXLAN architectures if they are provided by VMware

Question 4

What are the differences between Prisma Cloud Enterprise and Prisma Cloud Compute

AThe only difference is in the architecture - where the Console is hosted

BPrisma Cloud Compute offers lowered runtime defensive capabilities because there is no PANW cloud hosted component.

CPrisma Cloud Enterprise does not offer workload protection.

DOnly Prisma Cloud Compute offers API based cloud protection.

Correct Answer: C. Prisma Cloud Enterprise does not offer workload protection.

Question 5

Which interface mode do you use to generate the statdump file that can be converted into an SLR? Assume that the SE wants to make the evaluation as unintrusive as possible.

AVirtual Wire

BLayer 2

CTAP

DLayer 3

Correct Answer: C. TAP

Question 6

Why are containers uniquely suitable for whitelist-based runtime security?

ADevelopers typically define the processes used in their containers within the Dockerfile

BDocker has a built-in runtime analysis capability to aid in whitelisting.

CContainers typically have only a few defined processes that should ever be executed.

DOperations teams typically know what processes are used within a container

Correct Answer: A. Developers typically define the processes used in their containers within the Dockerfile

Question 7

For which two reasons would an administrator have to install NGFW automatically in a cloud environment? {Choose two )

Areduce capital expenses

Bperformance, to be able to install a new firewall when the demand exceeds the ability of the existing environments to service

Cintegrity, to ensure that data is not changed illicitly

Dresiliency and availability, to be able to install a new firewall as part of a new environment if an existing environment fails

Esecurity, to automatically install a firewall when a security threat is detected

Correct Answer: B. performance, to be able to install a new firewall when the demand exceeds the ability of the existing environments to service; E. security, to automatically install a firewall when a security threat is detected

Question 8

Which configuration is required to share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

Anotify device groups within VMware Services Manager

Ba User-ID agent on a Windows domain server

CVMware Information Sources

Dnone, sharing happens by default

Correct Answer: B. a User-ID agent on a Windows domain server

Question 9

Which three advantages of the Palo Alto Networks platform architecture are used to enable security orchestration in SDN? (Choose three )

Aa full set of APIs enabling programmatic control of policy and configuration

BNVGRE support for advanced VLAN integration

Cintegration with leading orchestration platforms: VMware NSX. OpenStack. and Cisco ACI

DDynamic Address Groups to adapt Security policies dynamically

EVXLAN support for network-layer abstraction

Correct Answer: C. integration with leading orchestration platforms: VMware NSX. OpenStack. and Cisco ACI; D. Dynamic Address Groups to adapt Security policies dynamically; E. VXLAN support for network-layer abstraction

Question 10

In a VMware deployment, in order for the customer to get maximum performance out of a VM-700 firewall in PAN-OS 8 x how many virtual CPU cores can be used?

A8

B3

C32

D16

Correct Answer: A. 8