Palo Alto Networks PSE-StrataDC Exam Practice Test Instant Access

Question 1

What are two types of security that can be implemented across every phase of the Build, Ship, and Run lifecycle of a workload? (Choose two )

ARuntime Security

BFirewalling

CVulnerability Management

DCompliance or Configuration Management

Answer : C, D

Question 2

How does Twistlock offer workload security at runtime?

Aworks with the IDP to identify over-privileged containers and services and restricts network access

Bquarantines containers that demonstrate increased CPU and memory usage

Cautomatically patches vulnerabilities and compliance issues for every container and service

Dbuilds a whitelist security model automatically for every container and service

Answer : A

Question 3

When deploying VM series on Openstack platform, which statement is correct?

AAllow configuration of at least one interface

BOpenStack compute node could be installed on a hypervisor platform

CAccept the VM-Series OVA image

DSet Instance type OS::Nova Server

Answer : B

Question 4

Which three components are relevant for installing a VM-Series firewall in an OpenStack environment? (Choose three )

Abootstrap files including init-cfg.txt. bootstrap.xml, and VM-Series auth codes

Ba valid VM-Series gcow2 image

CHypervisor: ESX

Da valid OpenStack heat template in json format

Ea valid vmseries vhd image

Fa valid OpenStack heat template in yaml format

Answer : A, B, D

Question 5

Which type of cloud service can be protected by an inline firewall controlled by the organization rather than by the cloud provider?

ASaaS

BlaaS

CPaaS

DFaaS

Answer : B

Question 6

When deploying VM series on NSX platform to support micro-segmentation, which statement is NOT correct?

AVM-Series uses NetX API to receive and send packets

BTraffic steering rules could be defined on Panorama and pushed to NSX Manager

CVM-Series provide Multi-tenancy support with multiple zones

DOne panorama could support to connect with only one NSX manager

Answer : A

Question 7

Which are two use cases for HSCI ports on the SMC module on PA-7000 Series? (Choose two )

AHA1 backup link in active/active HA

BHA1 link in active/passive HA

CHA3 link in active/active HA

DHA2 link in active/passive HA

Answer : C, D

https://docs.paloaltonetworks.com/hardware/pa-7000-hardware-reference/pa-7000-series-module-and-interface-card-information/pa-7000-series-switch-management-card-smc/pa-7000-series-smc-component-descriptions

Palo Alto Networks PSE-StrataDC Palo Alto Networks System Engineer - Strata Data Center Exam Practice Test