Palo Alto Networks System Engineer Professional - Strata Data Center

QUESTION NO: 1
What are the differences between Prisma Cloud Enterprise and Prisma Cloud Compute

A. Only Prisma Cloud Compute offers API based cloud protection. B. Prisma Cloud Enterprise does not offer workload protection. C. The only difference is in the architecture - where the Console is hosted D. Prisma Cloud Compute offers lowered runtime defensive capabilities because there is no PANW cloud hosted component.

Correct Answer: B

QUESTION NO: 2
Which protocol is used by VMware to encapsulate packets in NSX?

A. VMLAN B. VXLAN C. GRE D. VRLAN

Correct Answer: B

QUESTION NO: 3
Which three advantages of the Palo Alto Networks platform architecture are used to enable security orchestration in SDN? (Choose three )

A. VXLAN support for network-layer abstraction B. NVGRE support for advanced VLAN integration C. integration with leading orchestration platforms: VMware NSX. OpenStack. and Cisco ACI D. Dynamic Address Groups to adapt Security policies dynamically E. a full set of APIs enabling programmatic control of policy and configuration

Correct Answer: A,C,D

QUESTION NO: 4
Which interface mode do you use to generate the statdump file that can be converted into an SLR? Assume that the SE wants to make the evaluation as unintrusive as possible.

A. Virtual Wire B. Layer 3 C. TAP D. Layer 2

Correct Answer: C

QUESTION NO: 5
What is the primary operational benefit of a managed Kubernetes service from a Cloud Service Provider?

A. more powerful, offers more configuration options than running your own distribution of Kubernetes B. reduced complexity, alleviates the need to run masters C. increased visibility, provides more insight into application usage than what is natively available D. less expensive, typically offered at a lower cost than running containers on a VM

Correct Answer: B

QUESTION NO: 6
Which configuration is requiredto share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

A. notify device groups within VMware Services Manager B. VMware Information Sources C. a User-ID agent on a Windows domain server D. none, sharing happens by default

Correct Answer: C

Palo Alto Networks System Engineer Professional - Strata Data Center - PSE-StrataDC Exam Questions