PSE-StrataDC Exam Training Practice Tests (Palo Alto Networks System Engineer Professional

Question 1

What are two types of security that can be implemented across every phase of the Build, Ship, and Run lifecycle of a workload? (Choose two )

A. Compliance or Configuration Management B. Vulnerability Management C. Firewalling D. Runtime Security

Correct Answer: A,B

Question 2

Why are containers uniquely suitable for whitelist-based runtime security?

A. Docker has a built-in runtime analysis capability to aid in whitelisting. B. Operations teams typically know what processes are used within a container C. Developers typically define the processes used in their containers within the Dockerfile D. Containers typically have only a few defined processes that should ever be executed.

Correct Answer: C

Question 3

Which environment is least likely to be placed on a public cloud by a hospital that has a large health information management application?

A. QA B. testing C. production D. development

Correct Answer: D

Question 4

Which VM series model is NOT supported on VMware NSX platform?

A. VM-500 B. VM-300 C. VM-700 D. VM-1000-HV

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

In the following scenario, Route-based firewall redundancy is deployed in a Data Center, which statement is true?

A. IP addresses of Firewall interfaces will move between devices when a firewall fails B. Floating IP addresses are necessary for HA configuration C. Firewalls use dynamic routing protocols to determine the best path D. The 2 firewalls are in Active-Standby HA status

Correct Answer: C

Question 6

What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager?
(Choose three.)

A. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment B. Panorama can establish communications to the public Palo Alto Networks update servers. C. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls D. The deployed VM-Series firewall can establish communications with Panorama. E. Panorama has been configured to recognize both the NSX Manager and vCenter.

Correct Answer: B,C,E

Palo Alto Networks System Engineer Professional - Strata Data Center - PSE-StrataDC Exam Practice Test