Pass the Paloalto Networks PSE-DataCenter Professional PSE-StrataDC Questions and answers with ExamsMirror

by creating an access policy

through a policy-based redirect (PBR)

contracts between EPGs that send traffic to the firewall using a shared policy

through a virtual machine monitor (VMM) domain

can use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

can use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

can use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

can use a specialized VM with advanced threat protection for this requirement

device group membership

template membership

Dynamic Address Group membership

rule grouping

VM-Series uses NetX API to receive and send packets

Traffic steering rules could be defined on Panorama and pushed to NSX Manager

VM-Series provide Multi-tenancy support with multiple zones

One panorama could support to connect with only one NSX manager

reduced complexity, alleviates the need to run masters

less expensive, typically offered at a lower cost than running containers on a VM

more powerful, offers more configuration options than running your own distribution of Kubernetes

increased visibility, provides more insight into application usage than what is natively available

does not integrate with VXLAN tagging, so virtual appliances cannot be provided, but hardware appliances can be offered at the data center gateway border

integrates with VXLAN. but scripting is necessary, and Professional Services should be engaged

integrates fully into VXLAN architectures if they are provided by VMware

does not integrate natively with VXLAN tagging, network equipment can convert VXLAN flows to VLANs and send those VLANs to Palo Alto Networks firewalls

VRRP

HSRP

floating IP address

ARP load sharing

Arista and VMware are extending secure segmentation with an open API (RESTZJSON)-based exchange, which allows NSX to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

Arista and Kubernetes are extending secure segmentation with an open API (RESTVJSON)-based exchange, which allows Kubernetes to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

Arista's micro-segmentation and macro-segmentation are identical concepts that can be used interchangeably

Arista and VMware both perform identical functions for NGFW micro-segmentation

Select Steering Rules > 3rd Party Firewalls > Palo Alto Networks and then populate the object with the required details

Configure the rule in Panorama and push it to NSX-V Manager.

Select Fabric > Access Policies > Quick Start and follow the prompts

Add a network introspective service and select Redirect to Service under Action.

user IP mappings

steering rules

multiple authorization codes

security group assignments of VMs

security groups