Page 1 out of 11. Viewing questions 1-10 out of 103
Question 1
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?
A.
HA-Series
B.
CN-Series
C.
PA-Series
D.
VM-Series
Answer:
d
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 2
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)
A.
Heartbeat polling
B.
Ping monitoring
C.
Session polling
D.
Link monitoring
Answer:
ad
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 3
Which two criteria are required to deploy VM-Series firewalls in high availability (HA)? (Choose two.)
A.
Assignment of identical licenses and subscriptions
B.
Deployment on a different host
C.
Configuration of asymmetric routing
D.
Deployment on same type of hypervisor
Answer:
ad
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 4
Which two actions can be performed for VM-Series firewall licensing by an orchestration system? (Choose two.)
A.
Creating a license
B.
Renewing a license
C.
Registering an authorization code
D.
Downloading a content update
Answer:
ac
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 5
Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)
A.
Prism Central
B.
Bootstrap
C.
Service Cluster
D.
Host-based
Answer:
bc
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 6
Which service, when enabled, provides inbound traffic protection?
A.
Advanced URL Filtering (AURLF)
B.
Threat Prevention
C.
Data loss prevention (DLP)
D.
DNS Security
Answer:
b
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 7
How are Palo Alto Networks Next-Generation Firewalls (NGFWs) deployed within a Cisco ACI architecture?
A.
SDN code hooks can help detonate malicious file samples designed to detect virtual environments.
B.
Traffic can be automatically redirected using static address objects.
C.
Service graphs are configured to allow their deployment.
D.
VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.
Answer:
c
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 8
Which feature must be configured in an NSX environment to ensure proper operation of a VM-Series firewall in order to secure east-west traffic?
A.
Deployment of the NSX DFW
B.
VMware Information Sources
C.
User-ID agent on a Windows domain server
D.
Device groups within VMware Services Manager
Answer:
a
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 9
A system engineer managing a deployment of CN-Series with Panorama (software version 11.0) installs the Kubernetes Plugin. When the installation is complete, templates are present. What are the names of two of these templates and for what are they used? (Choose two.)
A.
K8S-Network-Setup used for daemonset
B.
K8S-Network-Setup-V2 used for Kubernetes as a service deployment
C.
K8S-Network-Setup-V3 used for Kubernetes as a service deployment
D.
K8S-Network-Setup-V3 used for CNF daemonset
Answer:
ad
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 10
Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)
A.
Security group assignment of virtual machines (VMs)