Download Valid Palo Alto Networks PSE Strata Exam Questions To Ensure Your Success

test2022-03-18T08:29:19+00:00

Looking for free practice test for your Palo Alto Networks PSE Strata Exam? Palo Alto Networks System Engineer Professional – Strata is a hot exam chosen by lots of candidates, our PSE Strata exam questions make your preparation process simply because they are designed to help you pass your exam on the first try. This free PSE Strata practice test can now be used to assess your preparation. Here you will find a complete PSE Strata dump to help you pass on the first try!

You can now use our free PSE Strata practice test to help you prepare for the exam.

Page 1 of 2

1. Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

User Mapping

Proxy Authentication

Group Mapping

802.1X Authentication

2. When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

1500 to 2500 bytes

10MB to 30 MB

1MB to 5 MB

100MB to 200 MB

3. A client chooses to not block uncategorized websites.

Which two additions should be made to help provide some protection? (Choose two.)

A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

A security policy rule using only known URL categories with the action set to allow

4. What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

It can automatically create address groups for use with KV

It can bootstrap the virtual firewalls for dynamic deployment scenarios.

5. Which profile or policy should be applied to protect against port scans from the internet?

Interface management profile on the zone of the ingress interface

Zone protection profile on the zone of the ingress interface

An App-ID security policy rule to block traffic sourcing from the untrust zone

Security profiles to security policy rules for traffic sourcing from the untrust zone

6. What are two advantages of the DNS Sinkholing feature? (Choose two.)

It forges DNS replies to known malicious domains.

It monitors DNS requests passively for malware domains.

It can be deployed independently of an Anti-Spyware Profile.

It can work upstream from the internal DNS server.

7. Which are the three mandatory components needed to run Cortex XDR? (Choose three.)

Panorama

NGFW with PANOS 8 0.5 or later

Cortex Data Lake

Traps

Pathfinder

Directory Syn Service

8. An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category.

Which two timeframe options are available to send this report? (Choose two.)

Daily

Monthly

Weekly

Bi-weekly

9. Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

use of decryption policies

measure the adoption of URL filters. App-I

User-ID

use of device management access and settings

expose the visibility and presence of command-and-control sessions

identify sanctioned and unsanctioned SaaS applications

10. Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)

breach the perimeter

weaponize vulnerabilities

lateral movement

exfiltrate data

recon the target

deliver the malware

Page 2 of 2

11. Which three new script types can be analyzed in WildFire? (Choose three.)

VBScript

JScript

MonoScript

PythonScript

PowerShell Script

12. Palo Alto Networks publishes updated Command-and-Control signatures .

How frequently should the related signatures schedule be set?

Once a day

Once a week

Once every minute

Once an hour

13. When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

8MB

depends on the Cortex Data Lake tier purchased

18 bytes

1500 bytes

14. 1.Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

dedicated pair of decryption forwarding interfaces required per security chain

a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule

a unique Decryption policy rule is required per security chain

a single pair of decryption forwarding interfaces

15. Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

Generate a Stats Dump File and upload it to the Palo Alto Networks support portal

Select Panorama > Licenses and click Activate feature using authorization code

Generate a Tech Support File and call PANTAC

Select Device > Licenses and click Activate feature using authorization code

16. A customer is concerned about zero-day targeted attacks against its intellectual property.

Which solution informs a customer whether an attack is specifically targeted at them?

Traps TMS

AutoFocus

Panorama Correlation Report

Firewall Botnet Report