PSE-DataCenter Practice Exam Questions and Answers

A.  

Static tags exist, but dynamic tags do not.

B.  

Dynamic tags exist, but static tags do not.

C.  

S tatic tags are part of the configuration on the firewall, but dynamic tags are part of the runtime configuration.

D.  

Static tags are hard coded into each VM, but dynamic tags are assigned by the firewall during runtime.

A.  

Four

B.  

Six

C.  

Eight

D.  

It depends upon whether the front - to - back airflow duct is in use.

A.  

A shared gateway interface that does not need a full administrative boundary

B.  

A virtual router as a replacement for an internet-facing router

C.  

A single physical firewall shared by different organizations, each with unique traffic control needs

D.  

A VMware NSX deployment that needs micros segmentation

A.  

preconfigured GlobalProtcet satellite

B.  

preconfigured GlobalProtcet client

C.  

preconfigured iPsec tunnels

D.  

preconfigured PPTP Tunnels

A.  

Define a custom App-ID to ensure that only legitimate application traffic reaches the server.

B.  

Add a Vulnerability Protection Profile to block the attack.

C.  

Add QoS Profiles to throttle incoming requests.

D.  

Add a DoS Protection Profile with defined session count.

A.  

The second VM - Series firewall should be in a different host and the HA3 connection should be over a dedicated high - speed link .

B.  

The second VM - Series firewall should be in the same virtual machine so the HA3 connection does not have to travel over a physical connection .

C.  

The HA3 connection should traverse no more than a single virtual switch.

D.  

There is no HA3 connection on a VM - Series firewall.

A.  

The PA - 7050 cannot support the second generation NPCs; a PA - 7080 is required.

B.  

PAN - OS 6.1 or higher

C.  

PAN - OS 7.0 or higher

D.  

The second generation NPCs must be installed in matched pairs.