Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Paloalto Networks PSE-StrataDC Practice Exam with Questions & Answers

Questions 1

Which three steps are valid for deploying a VM-Series firewall on NSX? (Choose three )

Options:
A.

create steering policies to redirect traffic to the VM-Series firewall

B.

create a vDC and a vApp that includes the VM-Series firewall

C.

register the VM-Series firewall as a service

D.

obtain the AMI from market place

E.

enable communication between Panorama and the NSX Manager

Paloalto Networks PSE-StrataDC Premium Access
Questions 2

How does Twistlock offer workload security at runtime?

Options:
A.

works with the IDP to identify over-privileged containers and services and restricts network access

B.

quarantines containers that demonstrate increased CPU and memory usage

C.

automatically patches vulnerabilities and compliance issues for every container and service

D.

builds a whitelist security model automatically for every container and service

Questions 3

Which task is required to create steering rules on NSX-V Manager?

Options:
A.

Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required details

B.

Configure the rule in Panorama and push it to NSX-V Manager.

C.

Select Fabric > Access Policies > Quick Start and follow the prompts

D.

Add a network introspective service and select Redirect to Service under Action.

Questions 4

How does the Palo Alto Networks NGFW integrate with Arista Networks Macro-Segmentation Service?

Options:
A.

Arista supports all hardware models of the Palo Alto Networks NGFW natively.

B.

Arista allows standalone non-HA firewalls to be attached to a service leaf switch. You must configure an Elastic Load Balancer to obtain fault tolerance.

C.

Arista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

D.

Arista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls

Questions 5

When deploying VM series on Openstack platform, which statement is correct?

Options:
A.

Allow configuration of at least one interface

B.

OpenStack compute node could be installed on a hypervisor platform

C.

Accept the VM-Series OVA image

D.

Set Instance type OS::Nova Server

Questions 6

Which configuration is requiredto share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

Options:
A.

notify device groups within VMware Services Manager

B.

a User-ID agent on a Windows domain server

C.

VMware Information Sources

D.

none, sharing happens by default

Questions 7

Which three components are relevant for installing a VM-Series firewall in an OpenStack environment? (Choose three )

Options:
A.

bootstrap files including init-cfg.txt. bootstrap.xml, and VM-Series auth codes

B.

a valid VM-Series gcow2 image

C.

Hypervisor: ESX

D.

a valid OpenStack heat template in json format

E.

a valid vmseries vhd image

F.

a valid OpenStack heat template in yaml format

Questions 8

What is a company that is moving as much of its business as possible into Microsoft Azure trying to minimize?

Options:
A.

capital expenses

B.

operating expenses

C.

security exposure

D.

operating expenses and capital expenses

Questions 9

Whichconfiguration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?

Options:
A.

Create security groups only.

B.

Create security groups and mark them as exchangeable.

C.

Create security groups with tags marked as shareable.

D.

Create security groups and use them in an NSX-to-Palo Alto Networks redirection policy.

Questions 10

Which features are included in the less-expensive license bundle meant for NSX?

Options:
A.

capacity license, premium support, a threat prevention subscription. and GlobalProtect

B.

capacity license and premium support

C.

capacity license, premium support and a threat prevention subscription

D.

capacity license and a threat prevention subscription

Exam Code: PSE-StrataDC
Certification Provider: Paloalto Networks
Exam Name: Palo Alto Networks System Engineer Professional - Strata Data Center
Last Update: Jul 16, 2025
Questions: 60