Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-StrataDC Exam - Topic 3 Question 101 Discussion

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?
D) Create a Layer 3 interface in the same subnet as the VMs and configure proxy ARP
A) Create a new virtual switch and use the VM-Series firewall to separate virtual switches using Virtual Wire mode Then move the guests that require more security into the new virtual switch
B) Edit the IP address of all of the affected VMs
C) Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete the old default gateway

Palo Alto Networks PSE-StrataDC Exam - Topic 3 Question 101 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam
Question #: 101
Topic #: 3
[All PSE-StrataDC Questions]

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Edward at Jun 28, 2026, 03:09 PM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Mollie
1 day ago
Definitely not B, that would just create more problems!
upvoted 0 times
...
Alease
7 days ago
Layer 3 interface with proxy ARP (Option D) could work, but seems complicated.
upvoted 0 times
...
Alverta
12 days ago
Surprised that VLANs can be sent out to a hardware firewall like in Option C!
upvoted 0 times
...
Nikita
17 days ago
I disagree, editing IPs (Option B) is too disruptive for existing VMs.
upvoted 0 times
...
Annelle
22 days ago
Option A sounds right, using Virtual Wire mode is a good way to separate traffic.
upvoted 0 times
...
Kattie
27 days ago
I think using a hardware firewall like in option C could complicate things. It seems like it would require more changes than just separating the VMs.
upvoted 0 times
...
Sharee
1 month ago
I’m a bit confused about the Layer 3 interface option. Does that really allow for partitioning without changing IPs?
upvoted 0 times
...
Merilyn
1 month ago
I remember practicing a question similar to this, and I feel like editing the IP addresses would definitely not be the right choice.
upvoted 0 times
...
Serina
1 month ago
I think option A sounds familiar, but I'm not entirely sure how Virtual Wire mode works with virtual switches.
upvoted 0 times
...

Save Cancel