Palo Alto Networks PSE-SASE Exam Practice Test Instant Access

Question 1

Which application gathers health telemetry about a device and its WiFi connectivity in order to help determine whether the device or the WiFi is the cause of any performance issues?

Adata loss prevention (DLP)

Bremote browser isolation (RBI)

CCortex Data Lake

DGlobalProtect

Answer : C

Question 2

Which statement describes the data loss prevention (DLP) add-on?

AIt prevents phishing attacks by controlling the sites to which users can submit valid corporate credentials.

BIt employs automated policy enforcement to allow trusted behavior with a new Device-ID policy construct.

CIt is a centrally delivered cloud service with unified detection policies that can be embedded in existing control points.

DIt enables data sharing with third-party tools such as security information and event management (SIEM) systems.

Answer : C

Question 3

Which secure access service edge (SASE) networking component inspects web-based protocols and traffic to securely connect users to applications?

Aproxy

BSD-WAN

Csecure web gateway (SWG)

Dcloud access security broker (CASB)

Answer : C

Question 4

Which two services are part of the Palo Alto Networks cloud-delivered security services (CDSS) package? (Choose two.)

Avirtual desktop infrastructure (VDI)

BInternet of Things (IoT) Security

CAdvanced URL Filtering (AURLF)

Dsecurity information and event management (SIEM)

Answer : B, C

Question 5

What can prevent users from unknowingly downloading potentially malicious file types from the internet?

AApply a File Blocking profile to Security policy rules that allow general web access.

BApply a Zone Protection profile to the untrust zone.

CAssign an Antivirus profile to Security policy rules that deny general web access.

DAssign a Vulnerability profile to Security policy rules that deny general web access.

Answer : A

Question 6

How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?

AUsers are mapped via server logs for login events and syslog messages from authenticating services.

BIt uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.

CIt prompts the browser to present a valid client certificate to authenticate the user.

DUsers access the SWG, which then connects the user to the website while still performing security measures.

Answer : D

Question 7

Which component of the secure access service edge (SASE) solution provides complete session protection, regardless of whether a user is on or off the corporate network?

AZero Trust

Bthreat prevention

Csingle-pass architecture (SPA)

DDNS Security

Answer : A

Palo Alto Networks Systems Engineer (PSE): SASE Associate PSE-SASE Exam Practice Test