The Palo Alto Networks PSE-DataCenter Questions & Practice Test are Available On-Demand [Q10-Q25]

QUESTION 10
Which three of these are valid profiles for configuring HA timers?

Recommended

Custom

Aggressive

Low – latency

Advanced

QUESTION 11
What is the default interval for the HA heartbeat ? :

100 milliseconds

1000 milliseconds

2 seconds

5 seconds

QUESTION 12
A service provider has acquired a pair of PA-7080s for its data center to secure its customer base’s traffic. The server provider’s traffic is largely generated by smart phones and averages 6,000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?

PA-7000-40G-NPC

PA-7000-20GQ-NPC

PA-7000-20GQXM-NPC

PA-7000-20G-NPC

QUESTION 13
A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

Define a custom App-ID to ensure that only legitimate application traffic reaches the server

Add QoS Profiles to throttle incoming requests

Add a tuned DoS Protection Profile

Add an Anti-Spyware Profile to block attacking IP address

QUESTION 14
What is required to support the second generation NPCs on a PA – 7050?

The PA – 7050 cannot support the second generation NPCs; a PA – 7080 is required.

PAN – OS 6.1 or higher

PAN – OS 7.0 or higher

The second generation NPCs must be installed in matched pairs.

QUESTION 15
What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance

Palo Alto Networks AutoFocus generated Correlation Objects

Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles

WF-500 configured as private clouds for privacy concerns

Palo Alto Networks non-firewall products, like Traps and Aperture

QUESTION 16
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.
Which two features must be enabled to meet the customer’s requirements? (Choose two.)

Virtual systems

HA active/active

Policy-based forwarding

HA active/passive

QUESTION 17
Which of these statements is true about Dynamic Address Groups?

T hey allow you to create a policy that automatically adapts to changes – adds, moves,

They enable the flexibility to apply different rules to th e same server based on tags

A dynamic address group uses tags as a filtering criterion to determine its members.

The filtering criteria uses logical and , or , and not operators.

QUESTION 18
A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to the future site?

Preconfigured GlobalProtect satellite

Preconfigured GlobalProtect client

Preconfigured IPsec tunnels

Preconfigured PPTP Tunnels

QUESTION 19
What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

It can monitor the virtual firewalls’ physical hosts and Vmotion them as necessary.

It can bootstrap the virtual firewall for dynamic deployment scenarios

It can manage the virtual firewalls’ resource use, allowing for VM resource over-subscription.

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support

Leave a Reply Cancel reply