Palo Alto Networks Exam PSE-StrataDC Topic 2 Question 64 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam

Question #: 64
Topic #: 2

How does the Palo Alto Networks NGFW integrate with Arista Networks Macro-Segmentation Service?

AArista supports all hardware models of the Palo Alto Networks NGFW natively.

BArista allows standalone non-HA firewalls to be attached to a service leaf switch. You must configure an Elastic Load Balancer to obtain fault tolerance.

CArista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

DArista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls

Show Suggested Answer

Suggested Answer: A

by Noelia at Jul 06, 2024, 09:06 PM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Johnna

1 months ago

Option D is interesting, but I think C is the way to go. Arista owning the security policy seems a bit too much integration for my liking.

upvoted 0 times

...

Bev

1 months ago

Haha, I'm definitely not going with the 'Elastic Load Balancer' option. That sounds like a disaster waiting to happen!

upvoted 0 times

Kiera

5 days ago

Haha, I'm definitely not going with the 'Elastic Load Balancer' option. That sounds like a disaster waiting to happen!

upvoted 0 times

...

Lina

7 days ago

D) Arista owns the Security policy. It can extend the concept of fine-grained intra-hypervisor security for VMs by enabling dynamic insertion of services for virtualized devices such as firewalls

upvoted 0 times

...

Ty

15 days ago

C) Arista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

upvoted 0 times

...

Julio

24 days ago

A) Arista supports all hardware models of the Palo Alto Networks NGFW natively.

upvoted 0 times

...

Kanisha

2 months ago

I'm not sure about the fault tolerance part, but option C does sound like the most logical integration approach between Arista and Palo Alto Networks.

upvoted 0 times

Janey

26 days ago

B) Arista allows standalone non-HA firewalls to be attached to a service leaf switch. You must configure an Elastic Load Balancer to obtain fault tolerance.

upvoted 0 times

...

Roxane

1 months ago

C) Arista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

upvoted 0 times

...

Julio

2 months ago

A) Arista supports all hardware models of the Palo Alto Networks NGFW natively.

upvoted 0 times

...

Son

2 months ago

Option C seems to be the correct answer. Arista CloudVision is able to integrate with Panorama to obtain the security policies and program the Arista switches accordingly.

upvoted 0 times

Armando

1 months ago

C) Arista CloudVision obtains relevant rules from Panorama through API and programs the Arista switches to steer intercepted east-west traffic to the Palo Alto Networks NGFW.

upvoted 0 times

...

Erasmo

1 months ago

A) Arista supports all hardware models of the Palo Alto Networks NGFW natively.

upvoted 0 times

...

Sheridan

2 months ago

Interesting point, Nell. I see your rationale. Let's wait and see what others think.

upvoted 0 times

...

Nell

3 months ago

I disagree, I believe the answer is D. Arista can extend security policy and enable dynamic insertion of services for virtualized devices like firewalls.

upvoted 0 times

...

Sheridan

3 months ago

I think the answer is C. Arista CloudVision obtains rules from Panorama and programs switches to steer traffic to Palo Alto Networks NGFW.

upvoted 0 times

...