In PAN-OS, which three NSX features can be pushed from Panorama? (Choose three)

A. user IP mappings

B. steering rules

C. multiple authorization codes

D. security group assignments of VMs

E. security groups

Which three components are relevant for installing a VM-Series firewall in an OpenStack environment? (Choose three)

A. bootstrap files including init-cfg.txt. bootstrap.xml, and VM-Series auth codes

B. a valid VM-Series gcow2 image

C. Hypervisor: ESX

D. a valid OpenStack heat template in json format

E. a valid vmseries vhd image

F. a valid OpenStack heat template in yaml format

Which feature removes the limitation of requiring the first interface to be management?

A. Management interface swap

B. Utilize a separate Load Balancer VM

C. Utilize a separate NAT VM.

D. Dataport interface switch

Which VM-Series can be deployed on Amazon Web Services (AWS)?

A. Can deploy any VM-Series except the VM-50

B. Only VM-100, VM-200 and VM-300

C. Any VM-Series model

D. Any VM-Series model except the VM-700

Which three advantages of the Palo Alto Networks platform architecture are used to enable security orchestration in SDN? (Choose three)

A. a full set of APIs enabling programmatic control of policy and configuration

B. NVGRE support for advanced VLAN integration

C. integration with leading orchestration platforms: VMware NSX. OpenStack. and Cisco ACI

D. Dynamic Address Groups to adapt Security policies dynamically

E. VXLAN support for network-layer abstraction

When deploying VM series on Openstack platform, which statement is correct?

A. Allow configuration of at least one interface

B. OpenStack compute node could be installed on a hypervisor platform

C. Accept the VM-Series OVA image

D. Set Instance type OS::Nova Server

What are three requirements to automate service deployment of a VM-Series firewall from an NSX Manager? (Choose three)

A. vCenter has been given Palo Alto Networks subscription licenses for VM-Series firewalls.

B. The deployed VM-Series firewall can establish communications with Panorama.

C. Panorama has been configured to recognize both the NSX Manager and vCenter.

D. Panorama can establish communications to the public Palo Alto Networks update servers.

E. The NSX Manager completed the host preparation prior to the VM-Series firewall service deployment.

What is the default session distribution policy in the PA-7000 Series?

A. Hash

B. Egress-Slot

C. Round Robin

D. Ingress-Slot

Which interface mode do you use to generate the statdump file that can be converted into an SLR?

A. Virtual Wire

B. Layer 2

C. TAP

D. Layer 3

When would a PA-7000 Series NPC GQXM Card be preferable to a PA-7000 Series NPC GQ Card?

A. When the organization requires a greater number of sessions.

B. When the environment has a need for more SFP+ interfaces.

C. When the organization requires gear with a smaller slot size.

D. When the environment has a need for more policy rules.