Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location
Mob_nav_barsMENU

Palo Alto Networks PSE-StrataDC Exam - Topic 7 Question 88 Discussion

Actual exam question for Palo Alto Networks's PSE-StrataDC exam
Question #: 88
Topic #: 7
[All PSE-StrataDC Questions]

A customer in a non-NSX VMware environment wants to add a VM-Series firewall and to partition an existing group of VMs in the same subnet into two groups. One group needs no additional security, but the second group requires substantially more security.

How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Muriel at Aug 16, 2025, 12:30 AM

Limited Time Offer

25%

Off

Get Premium PSE-StrataDC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Bernardo
4 days ago
I think I practiced a question similar to this where we had to use a VM-Series firewall to separate traffic. Creating a new virtual switch sounds familiar.
upvoted 0 times
...
Alethea
9 days ago
I remember something about using virtual switches and how they can help with segmentation, but I'm not sure if Virtual Wire mode is the right approach here.
upvoted 0 times
...
Kendra
15 days ago
The proxy ARP option seems interesting, but I'm not sure if that would give me the level of control I need for the more secure group. I think I'll focus on the virtual switch approach.
upvoted 0 times
...
Hui
20 days ago
I'm not too familiar with the VM-Series firewall, so I'll need to do a quick review of how that works before the exam. But this seems like a good approach overall.
upvoted 0 times
...
Katina
26 days ago
Okay, I think I've got it. Creating a new virtual switch and using the VM-Series firewall in Virtual Wire mode sounds like the way to go here. That way I can separate the groups without touching the existing network config.
upvoted 0 times
...
Chara
1 month ago
Hmm, I'm a bit confused by the requirement to not edit the IP addresses or default gateways. That seems to rule out a few of the options.
upvoted 0 times
...
Yen
1 month ago
This looks like a tricky one. I'll need to think through the options carefully to make sure I don't miss any important details.
upvoted 0 times
...
Sarah
3 months ago
I think option A is the best choice. It allows us to separate the VMs without changing any IP addresses.
upvoted 0 times
...
Glenn
3 months ago
I'm not sure about editing the IP addresses of the VMs. That could be a real headache and might cause issues down the line.
upvoted 0 times
...
Mel
3 months ago
Option A seems like the way to go. Creating a new virtual switch and using the VM-Series firewall to separate the groups sounds like the most straightforward approach.
upvoted 0 times
Micheal
2 months ago
User 2: Agreed, creating a new virtual switch and using the firewall to separate the groups is a good idea.
upvoted 0 times
...
Malcom
2 months ago
User 1: Option A seems like the best choice.
upvoted 0 times
...
...

Save Cancel