nerdexam
Palo_Alto_Networks

PSE-STRATADC · Question #59

A customer wants to completely segment their internal networks They have Cisco switches and extensively use 10Gbps interfaces. They are running VMware ESXi and are considering implementing NSX…

The correct answer is A. PA-3050 D. PA-3250 E. PA-7050. Options A (PA-3050), D (PA-3250), and E (PA-7050) are correct because all three are physical appliances that natively support 10Gbps (SFP+) interfaces, making them compatible with the customer's Cisco switching infrastructure running at 10Gbps. These hardware-based models also…

NGFW Hardware Selection and Deployment

Question

A customer wants to completely segment their internal networks They have Cisco switches and extensively use 10Gbps interfaces. They are running VMware ESXi and are considering implementing NSX. Which three Palo Alto Networks firewall models will support this deployment? (Choose three.)

Options

  • APA-3050
  • BVM-100
  • CVM-300
  • DPA-3250
  • EPA-7050

How the community answered

(20 responses)
  • A
    80% (16)
  • B
    10% (2)
  • C
    10% (2)

Explanation

Options A (PA-3050), D (PA-3250), and E (PA-7050) are correct because all three are physical appliances that natively support 10Gbps (SFP+) interfaces, making them compatible with the customer's Cisco switching infrastructure running at 10Gbps. These hardware-based models also integrate with VMware NSX to provide north-south and perimeter firewall services in an ESXi environment.

Why the distractors are wrong:

  • VM-100 (B): Capped at approximately 200 Mbps throughput - nowhere near the 10Gbps requirement.
  • VM-300 (C): Capped at approximately 2 Gbps throughput - still well below 10Gbps, and while VM-Series does integrate with NSX, these lower-tier models are throughput-limited and cannot sustain 10G line-rate traffic.

Memory tip: Think "10G = go physical." When you see 10Gbps in the requirements, filter out the VM-Series low-end models (VM-100/VM-300) immediately, since their throughput ceilings make them non-starters. Among the PA hardware lineup, models ending in "50" or higher in the 3000/7000 series (PA-3050, PA-3250, PA-7050) are your 10GbE-capable candidates.

Topics

#PA-3250#PA-7050#hardware model selection#NSX deployment

Community Discussion

No community discussion yet for this question.

Full PSE-STRATADC Practice