Palo Alto Networks Exam PSE-StrataDC Topic 1 Question 54 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam

Question #: 54
Topic #: 1

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

ACreate a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch

BEdit the IP address of all of the affected VMs

CSend the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway

DCreate a Layer 3 interface in the same subnet as the VMs and configure proxy ARP

Show Suggested Answer

Suggested Answer: B

by Jade at Mar 04, 2024, 03:32 PM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mariko

22 days ago

I'm not sure about option A. I think option D could also work by creating a Layer 3 interface.

upvoted 0 times

...

Merlyn

25 days ago

I agree with Malcom. Option A seems like the most efficient way to achieve the partitioning.

upvoted 0 times

...

Malcom

27 days ago

I think option A is the best choice. It allows us to separate the VMs without changing any IP addresses.

upvoted 0 times

...