Palo Alto Networks PSE-Strata Exam Practice Test Instant Access

Question 1

Which two steps are required to configure the Decryption Broker? (Choose two.)

Areboot the firewall to activate the license

Bactivate the Decryption Broker license

Cenable SSL Forward Proxy decryption

Denable a pair of virtual wire interfaces to forward decrypted traffic

Answer : B, D

Question 2

Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

Ause of decryption policies

Bmeasure the adoption of URL filters. App-ID. User-ID

Cuse of device management access and settings

Dexpose the visibility and presence of command-and-control sessions

Eidentify sanctioned and unsanctioned SaaS applications

Answer : A, B, E

Question 3

An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?

ACreate a footnote within the SLR generation tool

BEdit the Key-Findings text to list the other types of categories that may be of interest

CRemove unwanted categories listed under 'High Risk' and use relevant information

DProduce the report and edit the PDF manually

Answer : C

Question 4

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.

How is this goal accomplished?

ACreate a custom spyware signature matching the known signature with the time attribute

BAdd a correlation object that tracks the occurrences and triggers above the desired threshold

CSubmit a request to Palo Alto Networks to change the behavior at the next update

DConfigure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

Answer : A

Question 5

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

ADecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

BEliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

CProvides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

DDecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Answer : A, D

Question 6

A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types.

The customer uses a firewall with User-ID enabled

Which feature must also be enabled to prevent these attacks?

AContent Filtering

BWildFire

CCustom App-ID rules

DApp-ID

Answer : B

Question 7

What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

AEnterprise CA-signed certificates

BSelf-Signed certificates

CIntermediate certificates

DPrivate key certificates

Answer : A, B

%20certificate.&text=Certificate%20Name-,.,unique%20name%20for%20each%20firewall

Palo Alto Networks System Engineer - Strata PSE-Strata Exam Practice Test