PSE-STRATADC Online Practice Questions and Answers

Which environment is least likely to be placed on a public cloud by a hospital that has a large health information management application?

A. production

B. development

C. testing

D. QA

Which VM series model is NOT supported on VMware NSX platform?

A. VM-500

B. VM-1000-HV

C. VM-700

D. VM-300

Which protocol is used by VMware to encapsulate packets in NSX?

A. VRLAN

B. VXLAN

C. GRE

D. VMLAN

When deploying VM series on Openstack platform, which statement is correct?

A. Allow configuration of at least one interface

B. OpenStack compute node could be installed on a hypervisor platform

C. Accept the VM-Series OVA image

D. Set Instance type OS::Nova Server

A single VM runs a web server and a DNS server A separate VM needs to access the DNS server, but is

not allowed to access the web server.

What network control functionality is necessary to enforce this security posture?

A. can use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

B. can use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

C. can use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

D. can use a specialized VM with advanced threat protection for this requirement

What is the major decision factor that customers use when selecting a managed container platform such as AS/EKS/GKE?

A. licensing costs

B. enhanced capabilities not available in vanilla K8s

C. no need to manage containers, just the application code.

D. reduced operational costs and management overhead

Which interface mode do you use to generate the statdump file that can be converted into an SLR?

A. Virtual Wire

B. Layer 2

C. TAP

D. Layer 3

Which features are included in the less-expensive license bundle meant for NSX?

A. capacity license, premium support, a threat prevention subscription. and GlobalProtect

B. capacity license and premium support

C. capacity license, premium support and a threat prevention subscription

D. capacity license and a threat prevention subscription

How does the Palo Alto Networks NGFW integrate with Arista Networks Macro-Segmentation Service?

A. Arista supports all hardware models of the Palo Alto Networks NGFW natively.

B. Arista allows standalone non-HA firewalls to be attached to a service leaf switch. You must configure an Elastic Load Balancer to obtain fault tolerance.

C. Arista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

D. Arista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls.

What are the differences between Prisma Cloud Enterprise and Prisma Cloud Compute?

A. The only difference is in the architecture - where the Console is hosted.

B. Prisma Cloud Compute offers lowered runtime defensive capabilities because there is no PANW cloud hosted component.

C. Prisma Cloud Enterprise does not offer workload protection.

D. Only Prisma Cloud Compute offers API based cloud protection.