New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks PSE-StrataDC Exam - Topic 7 Question 88 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam
Question #: 88
Topic #: 7
[All PSE-StrataDC Questions]

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Lavera
2 months ago
Definitely need to keep those VMs secure, A is the best way to go!
upvoted 0 times
...
Thomasena
2 months ago
D could work too, proxy ARP is a neat trick for this.
upvoted 0 times
...
Jaime
2 months ago
Option A sounds right, using Virtual Wire mode is a solid choice.
upvoted 0 times
...
Lavonna
3 months ago
I disagree, editing IPs is not an option here, so B is out.
upvoted 0 times
...
Frederica
3 months ago
Surprised that C suggests sending VLAN to hardware, seems complicated!
upvoted 0 times
...
Ligia
3 months ago
I vaguely recall something about proxy ARP, but I'm not entirely clear on how that would help in this scenario without changing the IPs.
upvoted 0 times
...
Alecia
3 months ago
I feel like editing the IP addresses is definitely not the right answer since the question specifically says not to do that.
upvoted 0 times
...
Bernardo
4 months ago
I think I practiced a question similar to this where we had to use a VM-Series firewall to separate traffic. Creating a new virtual switch sounds familiar.
upvoted 0 times
...
Alethea
4 months ago
I remember something about using virtual switches and how they can help with segmentation, but I'm not sure if Virtual Wire mode is the right approach here.
upvoted 0 times
...
Kendra
4 months ago
The proxy ARP option seems interesting, but I'm not sure if that would give me the level of control I need for the more secure group. I think I'll focus on the virtual switch approach.
upvoted 0 times
...
Hui
4 months ago
I'm not too familiar with the VM-Series firewall, so I'll need to do a quick review of how that works before the exam. But this seems like a good approach overall.
upvoted 0 times
...
Katina
4 months ago
Okay, I think I've got it. Creating a new virtual switch and using the VM-Series firewall in Virtual Wire mode sounds like the way to go here. That way I can separate the groups without touching the existing network config.
upvoted 0 times
...
Chara
4 months ago
Hmm, I'm a bit confused by the requirement to not edit the IP addresses or default gateways. That seems to rule out a few of the options.
upvoted 0 times
...
Yen
5 months ago
This looks like a tricky one. I'll need to think through the options carefully to make sure I don't miss any important details.
upvoted 0 times
...
Sarah
6 months ago
I think option A is the best choice. It allows us to separate the VMs without changing any IP addresses.
upvoted 0 times
...
Glenn
6 months ago
I'm not sure about editing the IP addresses of the VMs. That could be a real headache and might cause issues down the line.
upvoted 0 times
...
Mel
6 months ago
Option A seems like the way to go. Creating a new virtual switch and using the VM-Series firewall to separate the groups sounds like the most straightforward approach.
upvoted 0 times
Micheal
5 months ago
User 2: Agreed, creating a new virtual switch and using the firewall to separate the groups is a good idea.
upvoted 0 times
...
Malcom
5 months ago
User 1: Option A seems like the best choice.
upvoted 0 times
...
...

Save Cancel