PSE-StrataDC Sample Questions Answers

VM-100

VM-1000

VM-300

VM-200

notify device groups within VMware Services Manager

a User-ID agent on a Windows domain server

VMware Information Sources

none, sharing happens by default

Swift creates the storage resources.

Nova creates the firewall instance.

Horizon

Neutron creates the network resources.

HA1 backup link in active/active HA

HA1 link in active/passive HA

HA3 link in active/active HA

HA2 link in active/passive HA

bootstrap files including init-cfg.txt. bootstrap.xml, and VM-Series auth codes

a valid VM-Series gcow2 image

Hypervisor: ESX

a valid OpenStack heat template in json format

a valid vmseries vhd image

a valid OpenStack heat template in yaml format

can use a Palo Alto Networks NGFW for this requirement, but not a port filter firewall.

can use either a Palo Alto Networks NGFW or a port filler firewall for this requirement.

can use a port filter firewall for this requirement but not the Palo Alto Networks NGFW.

can use a specialized VM with advanced threat protection for this requirement

reduce capital expenses

performance, to be able to install a new firewall when the demand exceeds the ability of the existing environments to service

integrity, to ensure that data is not changed illicitly

resiliency and availability, to be able to install a new firewall as part of a new environment if an existing environment fails

security, to automatically install a firewall when a security threat is detected

user IP mappings

steering rules

multiple authorization codes

security group assignments of VMs

security groups

Developers typically define the processes used in their containers within the Dockerfile

Docker has a built-in runtime analysis capability to aid in whitelisting.

Containers typically have only a few defined processes that should ever be executed.

Operations teams typically know what processes are used within a container

Can deploy any VM-Series except the VM-50

Only VM-100, VM-200 and VM-300

Any VM-Series model

Any VM-Series model except the VM-700

Aperture Orchestration Engine (AOE)

Support for Dynamic Address Groups

Fully instrumented API

VM Orchestration Policy Editor

Virtual Wire

TAP

Layer 2

Layer 3

Arista and VMware are extending secure segmentation with an open API (RESTZJSON)-based exchange, which allows NSX to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

Arista and Kubernetes are extending secure segmentation with an open API (RESTVJSON)-based exchange, which allows Kubernetes to federate with CloudVision to extend the micro-segmentation policy for physical workloads.

Arista's micro-segmentation and macro-segmentation are identical concepts that can be used interchangeably

Arista and VMware both perform identical functions for NGFW micro-segmentation

works with the IDP to identify over-privileged containers and services and restricts network access

quarantines containers that demonstrate increased CPU and memory usage

automatically patches vulnerabilities and compliance issues for every container and service

builds a whitelist security model automatically for every container and service

Management interface swap

Utilize a separate Load Balancer VM

Utilize a separate NAT VM.

Dataport interface switch