Palo Alto Networks Exam PSE-StrataDC Topic 4 Question 73 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam

Question #: 73
Topic #: 4

A single VM runs a web server and a DNS server A separate VM needs to access the DNS server, but is not allowed to access the web server What network control functionality is necessary to enforce this security posture'?

Acan use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

Bcan use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

Ccan use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

Dcan use a specialized VM with advanced threat protection for this requirement

Show Suggested Answer

Suggested Answer: C

by Rodrigo at Sep 19, 2024, 07:22 PM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Raylene

2 months ago

Seriously, who even needs a web server these days? Just run everything on the DNS server and call it a day. Problem solved! (But in all seriousness, I think B is the right answer.)

upvoted 0 times

Gregg

1 months ago

I think B is the right answer too, using either a Palo Alto Networks NGFW or a port filler firewall.

upvoted 0 times

...

Alyce

1 months ago

But for security reasons, it's important to separate the web server from the DNS server.

upvoted 0 times

...

Karol

1 months ago

I agree, running everything on the DNS server would simplify things.

upvoted 0 times

...

Van

2 months ago

I'd say B is the correct answer. Either a port filter firewall or a Palo Alto NGFW would work, but why go for the fancy option when the simple one will do the job?

upvoted 0 times

Vashti

2 months ago

Yeah, keeping it simple with a port filter firewall makes sense.

upvoted 0 times

...

Santos

2 months ago

I think so too, no need to overcomplicate things.

upvoted 0 times

...

Paola

2 months ago

I agree, B seems like the most practical choice.

upvoted 0 times

...

Wilson

2 months ago

Option B, for sure. Why spend more on a Palo Alto NGFW when a good old-fashioned port filter firewall can do the trick? Gotta watch that budget, am I right?

upvoted 0 times

...

Talia

2 months ago

I'm going with option C. A port filter firewall is the right tool for the job here, and I don't think the Palo Alto NGFW is necessary.

upvoted 0 times

Dong

27 days ago

Option D seems interesting, but I'm not sure if a specialized VM is necessary for this specific requirement.

upvoted 0 times

...

Lea

1 months ago

I'm leaning towards option A, I believe the Palo Alto Networks NGFW would provide the best security for this scenario.

upvoted 0 times

...

Paola

1 months ago

I think option B could also work, as it gives you more flexibility in choosing the firewall.

upvoted 0 times

...

Elvera

1 months ago

I agree, option C seems like the most appropriate choice.

upvoted 0 times

...

Vallie

3 months ago

I see your point, but I think option C might be the most cost-effective solution since a port filter firewall can also enforce the security posture.

upvoted 0 times

...

Edelmira

3 months ago

Hmm, I think option B is the way to go. A port filter firewall should be able to handle this requirement just fine, and the Palo Alto Networks NGFW is overkill in my opinion.

upvoted 0 times