A customer wants to completely segment their internal networks They have Cisco switches and extensively use 10Gbps interfaces. They are running VMware ESXi and are considering implementing NSX.

Which three Palo Alto Networks firewall models will support this deployment? (Choose three)

A. PA-3050

B. VM-100

C. VM-300

D. PA-3250

E. PA-7050

Which type of cloud service can be protected by an inline firewall controlled by the organization rather than by the cloud provider?

A. SaaS

B. laaS

C. PaaS

D. FaaS

Which two design options address split-brain when configuring HA? (Choose two)

A. Send heartbeats across the HA2 interfaces.

B. Bundle multiple interfaces in an Aggregated Interface Group and assign HA2.

C. Use the heartbeat backup.

D. Add a backup HA1 interface.

A customer in a non-NSX VMware environment wantsto add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

A. Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch.

B. Edit the IP address of all of the affected VMs.

C. Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway.

D. Create a Layer 3 interface in the same subnet as the VMs and configure proxy ARP.

Which VM-Series can be deployed on VMware NSX?

A. VM-100, VM-200, VM-300. VM-500. VM-1000-HV

B. VM-50r VM-100, VM-200, VM-300, VM-500

C. VM-100, VM-200, VM-300, VM-500, VM-700

D. All VM Series Models can be deployed on VMware NSX