Palo Alto Networks PSE-Strata Exam Questions Instant Access

Question 1

What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)

Awhen you're delivering a security strategy

Bwhen client's want to see the power of the platform

Cprovide users visibility into the applications currently allowed on the network

Dhelp streamline the deployment and migration of NGFWs

Eassess the state of NGFW feature adoption

Answer : B, C, E

Question 2

Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

AQuarantine

BAllow

CReset

DRedirect

EDrop

FAlert

Answer : B, C, E, F

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html

Question 3

When having a customer pre-sales call, which aspects of the NGFW should be covered?

AThe NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks

BThe Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content --- malware, phishing, and C2 are updated every five minutes --- to ensure that you can manage access to these sites within minutes of categorization

CThe NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor

DPalo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing

Answer : D

Question 4

The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security.

The firewall provides which three types of reports? (Choose three.)

ASNMP Reports

BPDF Summary Reports

CNetflow Reports

DBotnet Reports

EUser or Group Activity Reports

Answer : C, D, E

Question 5

In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

AHA3

BHA1

CHA2

DHA4

Answer : C

Question 6

WildFire subscription supports analysis of which three types? (Choose three.)

AGIF

B7-Zip

CFlash

DRPM

EISO

FDMG

Answer : B, C, E

Question 7

A WildFire subscription is required for which two of the following activities? (Choose two)

AFilter uniform resource locator (URL) sites by category.

BForward advanced file types from the firewall for analysis.

CUse the WildFire Application Programming Interface (API) to submit website links for analysis

DEnforce policy based on Host Information Profile (HIP)

EDecrypt Secure Sockets Layer (SSL)

Answer : B, C

Palo Alto Networks System Engineer - Strata PSE-Strata Exam Questions