Palo Alto Networks Exam PSE-StrataDC Topic 1 Question 54 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam

Question #: 54
Topic #: 1

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

ACreate a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch

BEdit the IP address of all of the affected VMs

CSend the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway

DCreate a Layer 3 interface in the same subnet as the VMs and configure proxy ARP

Show Suggested Answer

Suggested Answer: B

by Jade at Mar 04, 2024, 03:32 PM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tonette

1 months ago

Option B: 'Edit the IP address of all the affected VMs' - sounds like a job for the 'Copy and Paste' master!

upvoted 0 times

...

Matthew

2 months ago

Aha! Proxy ARP, that's an interesting idea. I like the simplicity of that approach.

upvoted 0 times

Tamera

6 days ago

User 4: Using proxy ARP seems like the most straightforward method to achieve the desired partitioning.

upvoted 0 times

...

Davida

12 days ago

User 3: Creating a new virtual switch with the VM-Series firewall in Virtual Wire mode is also a good option.

upvoted 0 times

...

Elvera

13 days ago

User 2: I agree, it's a simple and effective way to partition the VMs without changing their IP addresses.

upvoted 0 times

...

Meghann

29 days ago

User 1: Proxy ARP is a great solution for that scenario.

upvoted 0 times

...

India

2 months ago

Sending the VLAN out to a hardware firewall? Hmm, that could work, but it might add some latency and complexity to the setup.

upvoted 0 times

...

Yaeko

2 months ago

Editing the IP addresses of all the VMs? That's way too much work and could easily introduce errors. Next!

upvoted 0 times

Dulce

11 days ago

C) Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway

upvoted 0 times

...

Kristofer

18 days ago

A) Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch

upvoted 0 times

...

An

2 months ago

Option A looks good, but I'm not sure if creating a new virtual switch is the best solution. Wouldn't that require reconfiguring the guest VMs and potentially cause some downtime?

upvoted 0 times

Aleisha

13 days ago

Option A might cause some downtime, but it's a good solution to separate the groups without changing IP addresses

upvoted 0 times

...

Leslee

1 months ago

Option A might be the best choice to avoid downtime and reconfiguring the guest VMs.

upvoted 0 times

...

Aja

1 months ago

B) Edit the IP address of all of the affected VMs

upvoted 0 times

...

Gilma

1 months ago

B) Edit the IP address of all of the affected VMs

upvoted 0 times

...

Elke

2 months ago

A) Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch

upvoted 0 times

...

Julene

2 months ago

A) Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch

upvoted 0 times

...