Palo Alto Networks PSE-Strata Exam Practice Test Instant Access

Question 1

Which two features can be enabled to support asymmetric routing with redundancy on a Palo

Alto networks next-generation firewall (NGFW)? (Choose two.)

AActive / active high availability (HA)

BMultiple virtual systems

Cnon-SYN first packet

DAsymmetric routing profile

Answer : A, C

Question 2

What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)

Awhen you're delivering a security strategy

Bwhen client's want to see the power of the platform

Cprovide users visibility into the applications currently allowed on the network

Dhelp streamline the deployment and migration of NGFWs

Eassess the state of NGFW feature adoption

Answer : B, C, E

Question 3

A customer requires an analytics tool with the following attributes:

- Uses the logs on the firewall to detect actionable events on the network

- Automatically processes a series of related threat events that, when combines, indicate a likely comprised host on the network

- Pinpoints the area of risk and allows for assessment of the risk to action can be taken to prevent exploitation of network resources

Which feature of PAN-OS will address these requirements?

AWildFire with application program interface (API) calls for automation

BThird-party security information and event management (SIEM) which can ingest next-generation firewall (NGFW) logs

CAutomated correlation engine (ACE)

DCortex XDR and Cortex Data Lake

Answer : C

Question 4

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

AIt can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

BIt can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

CIt can automatically create address groups for use with KVM.

DIt can bootstrap the virtual firewalls for dynamic deployment scenarios.

Answer : A, D

Question 5

Within the Five-Step Methodology of Zero Trust, in which step would application access and user access be defined?

AStep 3: Architect a Zero Trust Network

BStep 5. Monitor and Maintain the Network

CStep 4: Create the Zero Trust Policy

DStep 1: Define the Protect Surface

EStep 2 Map the Protect Surface Transaction Flows

Answer : D

Question 6

Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

AUser Mapping

BProxy Authentication

CGroup Mapping

D802.1X Authentication

Answer : A, C

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id

Question 7

How do you configure the rate of file submissions to WildFire in the NGFW?

Abased on the purchased license uploaded

BQoS tagging

Cmaximum number of files per minute

Dmaximum number of files per day

Answer : C

https://www.paloaltonetworks.com/documentation/80/wildfire/wf_admin/submit-files-for-wildfire-analysis/firewall-file-forwarding-capacity-by-model

Palo Alto Networks PSE-Strata Palo Alto Networks System Engineer - Strata Exam Practice Test