Palo Alto Networks PSE-Strata Exam Practice Test Instant Access

Question 1

A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at 100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center

Which VM instance should be used to secure the network by this customer?

AVM-200

BVM-100

CVM-50

DVM-300

Answer : C

Question 2

What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

AA vulnerability profile to security policy rules that deny general web access

BAn antivirus profile to security policy rules that deny general web access

CA zone protection profile to the untrust zone

DA file blocking profile to security policy rules that allow general web access

Answer : D

https://docs.paloaltonetworks.com/best-practices/8-1/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/create-best-practice-security-profiles.html

Question 3

There are different Master Keys on Panorama and managed firewalls.

What is the result if a Panorama Administrator pushes configuration to managed firewalls?

AThe push operation will fail regardless of an error or not within the configuration itself

BProvided there's no error within the configuration to be pushed, the push will succeed

CThe Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

DThere will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

Answer : A

Question 4

A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

AFile Blocking Profile

BDoS Protection Profile

CURL Filtering Profile

DVulnerability Protection Profile

Answer : A

%2Fknowledgebase.paloaltonetworks.com%2Fservlet%2FfileField%3FentityId%3Dka10g000000U0roAAC%26field%3DAttachment_1__Body__s&usg=AOvVaw3DCBM7-FwWInkWYANLrzUt (32)

Question 5

Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

APrototype

BInputs

CClass

DFeed Base URL

Answer : D

https://live.paloaltonetworks.com/t5/minemeld-articles/connecting-pan-os-to-minemeld-using-external-dynamic-lists/ta-p/190414

Question 6

As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

Aaccess key ID

Bsecret access key

Cadministrative Password

DAWS account ID

Answer : A

https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-prisma-saas/begin-scanning-an-amazon-s3-app.html

Question 7

What are three considerations when deploying User-ID? (Choose three.)

ASpecify included and excluded networks when configuring User-ID

BOnly enable User-ID on trusted zones

CUse a dedicated service account for User-ID services with the minimal permissions necessary

DUser-ID can support a maximum of 15 hops

EEnable WMI probing in high security networks

Answer : A, B, C

Palo Alto Networks System Engineer - Strata PSE-Strata Exam Practice Test