Palo Alto Networks PSE Platform Exam Practice Test

What is a best practice when configuring a security policy to completely block a specific application?

A prospective customer was the victim of a zero-day attack that compromised specific employees, who then became unwitting attack vectors. The customer does not want that to happen again.

Which two Palo Alto Networks platform components will help this customer? (Choose two.)

Because of regulatory compliance a customer cannot decrypt specific types of traffic.

Which license should an SE recommend to the customer who will be decrypting traffic on the Palo Alto Networks firewall?

An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites.

The URL categories being chosen by default in the report are not highlighting these types of websites.

How should the SE show the customer the firewall can detect that these websites are being accessed?

A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6,000,000 concurrent sessions.

Which Network Processing Card should be recommended in the Bill of Materials?

What is the HA limitation specific to the PA-200 appliance?

An endpoint, inside an organization, is infected with known malware. The malware attempts to make a command and control connection to a C&C server via the destination IP address.

Which mechanism prevent this connection from succeeding?