PSE-StrataDC Practice Test

Whichconfiguration is required in NSX for Panorama to use the tags from security groups in dynamic address groups?

A.

Create security groups only.

B.

Create security groups and mark them as exchangeable.

C.

Create security groups with tags marked as shareable.

D.

Create security groups and use them in an NSX-to-Palo Alto Networks redirection policy.

Which two methods provide a virtual IP address when implementing active/active HA? (Choose two )

A.

VRRP

B.

HSRP

C.

floating IP address

D.

ARP load sharing

When deploying VM series on NSX platform to support micro-segmentation, which statement is NOT correct?

A.

VM-Series uses NetX API to receive and send packets

B.

Traffic steering rules could be defined on Panorama and pushed to NSX Manager

C.

VM-Series provide Multi-tenancy support with multiple zones

D.

One panorama could support to connect with only one NSX manager

Which VM-Series can be deployed on Amazon Web Services (AWS)?

A.

Can deploy any VM-Series except the VM-50

B.

Only VM-100, VM-200 and VM-300

C.

Any VM-Series model

D.

Any VM-Series model except the VM-700

How does Palo Alto Networks integrate with VXLAN tagging?

A.

does not integrate with VXLAN tagging, so virtual appliances cannot be provided, but hardware
appliances can be offered at the data center gateway border

B.

integrates with VXLAN. but scripting is necessary, and Professional Services should be engaged

C.

integrates fully into VXLAN architectures if they are provided by VMware

D.

does not integrate natively with VXLAN tagging, network equipment can convert VXLAN flows to
VLANs and send those VLANs to Palo Alto Networks firewalls