Palo Alto Networks PSE-Strata Exam Questions Instant Access

Question 1

There are different Master Keys on Panorama and managed firewalls.

What is the result if a Panorama Administrator pushes configuration to managed firewalls?

AThe push operation will fail regardless of an error or not within the configuration itself

BProvided there's no error within the configuration to be pushed, the push will succeed

CThe Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

DThere will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

Answer : A

Question 2

What are two benefits of the sinkhole Internet Protocol (IP) address that DNS Security sends to the client in place of malicious IP addresses? (Choose two.)

AThe client communicates with it instead of the malicious IP address

BIt represents the remediation server that the client should visit for patching

CIt will take over as the new DNS resolver for that client and prevent further DNS requests from occurring in the meantime

DIn situations where the internal DNS server is between the client and the firewall, it gives the firewall the ability to identify the clients who originated the query to the malicious domain

Answer : A, D

Question 3

What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

AEnterprise CA-signed certificates

BSelf-Signed certificates

CIntermediate certificates

DPrivate key certificates

Answer : A, B

%20certificate.&text=Certificate%20Name-,.,unique%20name%20for%20each%20firewall

Question 4

A prospective customer currently uses a firewall that provides only Layer 4

inspection and protections. The customer sees traffic going to an external destination, port 53, but cannot determine what Layer 7 application traffic is going over that port

Which capability of PAN-OS would address the customer's lack of visibility?

ADevice ID, because it will give visibility into which devices are communicating with external destinations over port 53

Bsingle pass architecture (SPA), because it will improve the performance of the Palo Alto Networks Layer 7 inspection

CUser-ID, because it will allow the customer to see which users are sending traffic to external destinations over port 53

DApp-ID, because it will give visibility into what exact applications are being run over that port and allow the customer to block unsanctioned applications using port 53

Answer : D

Question 5

Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

AGenerate a Stats Dump File and upload it to the Palo Alto Networks support portal

BSelect Panorama > Licenses and click Activate feature using authorization code

CGenerate a Tech Support File and call PANTAC

DSelect Device > Licenses and click Activate feature using authorization code

Answer : B

Question 6

When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

A8MB

Bdepends on the Cortex Data Lake tier purchased

C18 bytes

D1500 bytes

Answer : D

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVMCA0

Question 7

What are three considerations when deploying User-ID? (Choose three.)

ASpecify included and excluded networks when configuring User-ID

BOnly enable User-ID on trusted zones

CUse a dedicated service account for User-ID services with the minimal permissions necessary

DUser-ID can support a maximum of 15 hops

EEnable WMI probing in high security networks

Answer : A, B, C

Palo Alto Networks System Engineer - Strata PSE-Strata Exam Questions