Palo Alto Networks PSE-SASE Exam Questions Instant Access

Question 1

Which App Response Time metric measures the amount of time it takes to transfer incoming data from an external server to a local client?

AUDP Response Time (UDP-TRT)

BServer Response Time (SRT)

CNetwork Transfer Time (NTTn)

DRound Trip Time (RTT)

Answer : D

Question 2

Which two actions take place after Prisma SD-WAN Instant-On Network (ION) devices have been deployed at a site? (Choose two.)

AThe devices continually sync the information from directories, whether they are on-premise, cloud-based, or hybrid.

BThe devices establish VPNs over private WAN circuits that share a common service provider.

CThe devices automatically establish a VPN to the data centers over every internet circuit.

DThe devices provide an abstraction layer between the Prisma SD-WAN controller and a particular cloud service.

Answer : A, D

Question 3

Which two services are part of the Palo Alto Networks cloud-delivered security services (CDSS) package? (Choose two.)

Avirtual desktop infrastructure (VDI)

BInternet of Things (IoT) Security

CAdvanced URL Filtering (AURLF)

Dsecurity information and event management (SIEM)

Answer : B, C

Question 4

Which statement describes the data loss prevention (DLP) add-on?

AIt prevents phishing attacks by controlling the sites to which users can submit valid corporate credentials.

BIt employs automated policy enforcement to allow trusted behavior with a new Device-ID policy construct.

CIt is a centrally delivered cloud service with unified detection policies that can be embedded in existing control points.

DIt enables data sharing with third-party tools such as security information and event management (SIEM) systems.

Answer : C

Question 5

How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?

AIt provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.

BIt offers risk scoring, analytics, reporting, and Security policy rule authoring.

CIt provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.

DIt prevents credential theft by controlling sites to which users can submit their corporate credentials.

Answer : C

Question 6

In which step of the Five-Step Methodology of Zero Trust are application access and user access defined?

AStep 4: Create the Zero Trust Policy

BStep 3: Architect a Zero Trust Network

CStep 1: Define the Protect Surface

DStep 5: Monitor and Maintain the Network

Answer : A

Question 7

What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?

AA heartbeat connection between the firewall peers ensures seamless failover in the event that a peer goes down.

BIt prepares the keys and certificates required for decryption, creating decryption profiles and policies, and configuring decryption port mirroring.

CProtection is offered in the cloud through a unified platform for complete visibility and precise control over web access while enforcing security policies that protect users from hostile websites.

DIt creates tunnels that allow users and systems to connect securely over a public network as if they were connecting over a local area network (LAN).

Answer : C

Palo Alto Networks Systems Engineer (PSE): SASE Associate PSE-SASE Exam Questions