Palo Alto Networks PSE-SASE Exam Questions Instant Access

Question 1

Which two services are part of the Palo Alto Networks cloud-delivered security services (CDSS) package? (Choose two.)

Avirtual desktop infrastructure (VDI)

BInternet of Things (IoT) Security

CAdvanced URL Filtering (AURLF)

Dsecurity information and event management (SIEM)

Answer : B, C

Question 2

What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?

AA heartbeat connection between the firewall peers ensures seamless failover in the event that a peer goes down.

BIt prepares the keys and certificates required for decryption, creating decryption profiles and policies, and configuring decryption port mirroring.

CProtection is offered in the cloud through a unified platform for complete visibility and precise control over web access while enforcing security policies that protect users from hostile websites.

DIt creates tunnels that allow users and systems to connect securely over a public network as if they were connecting over a local area network (LAN).

Answer : C

Question 3

In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access 1.8?

ALicense bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.

BLicense bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.

CLicense bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.

DLicense bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.

Answer : C

Question 4

Which secure access service edge (SASE) networking component inspects web-based protocols and traffic to securely connect users to applications?

Aproxy

BSD-WAN

Csecure web gateway (SWG)

Dcloud access security broker (CASB)

Answer : C

Question 5

Which element of Prisma Access enables both mobile users and users at branch networks to access resources in headquarters or a data center?

AUser-ID

Bprivate clouds

CApp-ID

Dservice connections

Answer : D

Question 6

In which step of the Five-Step Methodology of Zero Trust are application access and user access defined?

AStep 4: Create the Zero Trust Policy

BStep 3: Architect a Zero Trust Network

CStep 1: Define the Protect Surface

DStep 5: Monitor and Maintain the Network

Answer : A

Question 7

What is a benefit of the Palo Alto Networks secure access service edge (SASE) solution's ability to provide insight into SD-WAN and network security metrics while highlighting critical issues across all managed tenants?

AIt rearchitects the way signatures are delivered, performing updates and streaming them to the firewall within seconds after the analysis is done.

BIt helps protect inbound, outbound, and east-west traffic between container workload types in Kubernetes environments without slowing development speed.

CIt simplifies workflows and instantly automates common use cases with hundreds of prebuilt playbooks.

DIt helps managed service providers (MSPs) accelerate troubleshooting and meet service level agreements (SLAs) for all their customers.

Answer : D

Palo Alto Networks Systems Engineer (PSE): SASE Associate PSE-SASE Exam Questions