Question 1

A single VM runs a web server and a DNS server A separate VM needs to access the DNS server, but is not allowed to access the web server What network control functionality is necessary to enforce this security posture'?

Acan use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

Bcan use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

Ccan use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

Dcan use a specialized VM with advanced threat protection for this requirement

Answer : C

Question 2

Which protocol is used by VMware to encapsulate packets in NSX?

AVRLAN

BVXLAN

CGRE

DVMLAN

Answer : B

Question 3

When would a PA-7000 Series NPC GQXM Card be preferable to a PA-7000 Series NPC GQ Card?

AWhen the organization requires a greater number of sessions

BWhen the environment has a need for more SFP+ interfaces

CWhen the organization requires gear with a smaller slot size.

DWhen the environment has a need for more policy rules.

Answer : A

Question 4

Which two OpenStack components are used in the creation of a VM-Series firewall from a heat template in OpenStack? (Choose two )

ASwift creates the storage resources.

BNova creates the firewall instance.

CHorizon

DNeutron creates the network resources.

Answer : A, C

Question 5

What is the major decision factor that customers use when selecting a managed container platform such as AS/EKS/GKE?

Alicensing costs

Benhanced capabilities not available in vanilla K8s

Cno need to manage containers, just the application code.

Dreduced operational costs and management overhead