Exit demo PSE-DATACENTER Palo Alto Networks System Engineer Professional - Data Center PDF format · free preview

Palo Alto Networks PSE-DATACENTER - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/pse-datacenter.html

Question 1
Single choice

Which statement is true regarding the HA3 interface on VM - Series firewalls in an HA configuration?

A.

The second VM - Series firewall should be in a different host and the HA3 connection should be over a
dedicated high - speed link .

B.

The second VM - Series firewall should be in the same virtual machine so the HA3 connection does not have to travel over a physical connection .

C.

The HA3 connection should traverse no more than a single virtual switch.

D.

There is no HA3 connection on a VM - Series firewall.

Question 2
Single choice

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

A.

Define a custom App-ID to ensure that only legitimate application traffic reaches the server

B.

Add a DoS Protection Profile with defined session count.

C.

Add a Vulnerability Protection Profile to block the attack.

D.

Add QoS Profiles to throttle incoming requests.

Question 3
Multiple choice

Which two designs require virtual systems? (Choose two.)

A.

A shared gateway interface that does not need a full administrative boundary

B.

A virtual router as a replacement for an internet-facing router

C.

A single physical firewall shared by different organizations, each with unique traffic control needs

D.

A VMware NSX deployment that needs micros segmentation

Question 4
Single choice

In addition to the expanded capacity for NPCs, what else is improved in the PA - 7080 over the PA - 7050?

A.

A second LPC is standard.

B.

A second SMC is standard.

C.

Front - to - back airflow is standard.

D.

Available 100Gb p s interfaces , but only with PAN - OS 7.0 and higher

Question 5
Single choice

By increasing the number of vCPUs in a VM - Series firewall from 4 to 8, by what factor is performance expected to increase?

A.

By a pproximately a factor of 2

B.

By a pp roximately a factor of 1.8

C.

By a pproximately a factor of 2.2

D.

Performance will not increase

Question 6
Single choice

Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

A.

WildFire on the firewall, and AutoFocus on Panorama

B.

URL Filtering on the firewall, and MindMeld on Panorama

C.

Threat Prevention on the firewall, and Support on Panorama

D.

GlobalProtect on the firewall, and Threat Prevention on Panorama

Question 7
Single choice

What is the difference between static and dynamic tags?

A.

Static tags exist, but dynamic tags do not.

B.

Dynamic tags exist, but static tags do not.

C.

S tatic tags are part of the configuration on the firewall, but dynamic tags are part of the runtime configuration.

D.

Static tags are hard coded into each VM, but dynamic tags are assigned by the firewall during runtime.

Question 8
Single choice

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

A.

Define a custom App-ID to ensure that only legitimate application traffic reaches the server

B.

Add QoS Profiles to throttle incoming requests

C.

Add a tuned DoS Protection Profile

D.

Add an Anti-Spyware Profile to block attacking IP address

Question 9
Single choice

A price sensitive customer wants to prevent attacks on a windows 2008 Virtual Server.

The server will max out at 100Mbps but needs to have 45,000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

A.

VM-200

B.

VM-100

C.

VM-300

D.

VM-50

Question 10
Single choice

What is the default interval for the HA heartbeat ? :

A.

100 milliseconds

B.

1000 milliseconds

C.

2 seconds

D.

5 seconds

Showing 10 of 25 questions · Unlock the full set