Online Access Free PSE-StrataDC Practice Test

Which two OpenStack components areused in the creation of a VM-Series firewall from a heat template in OpenStack? (Choose two )

• A.Neutron creates the network resources.
• B.Swift creates the storage resources.
• C.Horizon
• D.Nova creates the firewall instance.

What are the benefits of NSX-V?

• A.sturdier centralized management; automated deployment ease in administering tenants and dedicated compute infrastructure; tighter integration between virtual environment and security enforcement of dynamic security
• B.supports the Data Plane Development Kit (DPDK) libraries; enables Stackdnver Monitoring on the VMware Series Firewall; works with Cloud Launcher
• C.virt-manager wizard to help with the installation process; virsh command to deploy the VM-Series; virt-installcommand to install
• D.leverages Prism Central

A customer in a non-NSX VMware environment wantsto add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

• A.Create a Layer 3 interface in the same subnet as the VMs and configure proxy ARP
• B.Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch
• C.Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway
• D.Edit the IP address of all of the affected VMs

Which are two use cases for HSCI ports on the SMC module on PA-7000 Series? (Choose two )

• A.HA1 backup link in active/active HA
• B.HA3 link in active/active HA
• C.HA1 link in active/passive HA
• D.HA2 link in active/passive HA

In the following scenario, Route-based firewall redundancy is deployed in a Data Center, which statement is true?

• A.IP addresses of Firewall interfaces will move between devices when a firewall fails
• B.Floating IP addresses are necessary for HA configuration
• C.Firewalls use dynamic routing protocols to determine the best path
• D.The 2 firewalls are in Active-Standby HA status