Palo Alto Networks PSE-Strata Exam Practice Test Instant Access

Question 1

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)

APolicy-based forwarding

BHA active/active

CVirtual systems

DHA active/passive

Answer : A, B

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/route-based-redundancy

Question 2

An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.

The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)

AControl of post rules

BControl local firewall rules

CEnsure management continuity

DImprove log collection redundancy

Answer : C, D

Question 3

What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

Aoperational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)

Bimproved revenue due to more efficient network traffic throughput

CIncreased security due to scalable cloud delivered security Services (CDSS)

DCost savings due to reduction in IT management effort and device

Answer : B, C, D

Question 4

Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?

AOption

BOption

COption

DOption

Answer : A

https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-tasks.html

Question 5

A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.

Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

AInforms WildFire and sends up a signature to the Cloud

BCollects forensic information about the event

CCommunicates the status of the endpoint to the ESM

DNotifies the user about the event

ERemediates the event by deleting the malicious file

Answer : B, C, D

https://investors.paloaltonetworks.com/node/11156/html

Question 6

Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

AIdentified vulnerability exploits

BLaunch of an identified malware executable file

CEndpoints access files from a removable drive

DSuspicious host behavior

Answer : A, D

Question 7

When having a customer pre-sales call, which aspects of the NGFW should be covered?

AThe NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks

BThe Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content --- malware, phishing, and C2 are updated every five minutes --- to ensure that you can manage access to these sites within minutes of categorization

CThe NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor

DPalo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing

Answer : D

Palo Alto Networks System Engineer - Strata PSE-Strata Exam Practice Test