Palo Alto Networks PSE-PLATFORM Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-PLATFORM Online Questions & Answers

• Question 1:

  Which configuration creates the most comprehensive "best-practice" Anti Spyware profile to prevent command and Control traffic?

  A. Clone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone
  B. Clone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone
  C. Edit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)
  D. Edit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)
  A. Clone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

• Question 2:

  What are the three benefits of the Palo Alto Networks migration tool? (Choose three.)

  A. Conversion of existing firewall policies to Palo Alto Networks NGFW policies
  B. Analysis of existing firewall environment
  C. Assistance with the transition from POC to Production
  D. Elimination of the need for consulting/professional services
  E. The migration tool provides App-ID enhancements to improve Technical Support calls
  A. Conversion of existing firewall policies to Palo Alto Networks NGFW policies
  B. Analysis of existing firewall environment
  C. Assistance with the transition from POC to Production

• Question 3:

  Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

  A. Create an anti-spyware profile to block all spyware
  B. Create a vulnerability protection profile to block all the vulnerabilities with severity low and higher
  C. Create an SSL Decryption policy to decrypt 100% of the traffic
  D. Create an antivirus profile to block all content that matches and antivirus signature
  E. Create a WildFire profile to schedule file uploads during low network usage windows
  B. Create a vulnerability protection profile to block all the vulnerabilities with severity low and higher
  C. Create an SSL Decryption policy to decrypt 100% of the traffic
  E. Create a WildFire profile to schedule file uploads during low network usage windows

• Question 4:

  Which two designs require virtual systems? (Choose two.)

  A. A shared gateway interface that does not need a full administrative boundary
  B. A virtual router as a replacement for an internet-facing router
  C. A single physical firewall shared by different organizations, each with unique traffic control needs
  D. A VMware NSX deployment that needs micros segmentation
  B. A virtual router as a replacement for an internet-facing router
  C. A single physical firewall shared by different organizations, each with unique traffic control needs

• Question 5:

  Which option is required to activate/retrieve a Device Management License on the M.100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

  A. Generate a Tech Support File and call PANTAC
  B. Select Device > Licenses and click activate feature using authorization code
  C. Select PANORAMA > Licenses and click Activate feature using authorization code
  D. Generate a State Dump File and upload it to the Palo Alto Network support portal
  C. Select PANORAMA > Licenses and click Activate feature using authorization code

• Question 6:

  Which three policies or certificates must be configured for SSL Forward Proxy decryption? (Choose three.)

  A. Forward trust certificate
  B. Forward untrust certificate
  C. A decrypt port mirror policy
  D. Internal server certificate
  E. A decryption policy
  A. Forward trust certificate
  B. Forward untrust certificate
  E. A decryption policy

• Question 7:

  Which three network events are highlighted through correlation objects as a potential security risks? (Choose three.)

  A. Identified vulnerability exploits
  B. Suspicious traffic patterns
  C. Known command-and-control activity
  D. Launch of an identified malware executable file
  E. Endpoints access files from a removable drive
  A. Identified vulnerability exploits
  B. Suspicious traffic patterns
  C. Known command-and-control activity

• Question 8:

  What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)

  A. It should be used to create pipeline and customer interest.
  B. It should be used to demonstrate the power of the platform.
  C. The lab documentation should be reviewed and tested.
  D. It should be led by Palo Alto Network employees.
  E. The required equipment should be shipped to lab site in advance.
  A. It should be used to create pipeline and customer interest.
  B. It should be used to demonstrate the power of the platform.
  C. The lab documentation should be reviewed and tested.

• Question 9:

  How do Highly Suspicious artifacts in-AutoFocus help identify when an unknown, potential zero-day, targeted attack occur to allow one to adjust the security posture?

  A. Highly Suspicious artifacts are associated with High-Risk payloads that are inflicting massive amounts of damage to end customers.
  B. All High Risk artifacts are automatically classified as Highly Suspicious.
  C. Highly Suspicious artifacts are High Risk artifacts that have been seen in very few samples.
  D. Highly Suspicious artifacts have been seen infecting a broad, significant range of companies.
  C. Highly Suspicious artifacts are High Risk artifacts that have been seen in very few samples.

• Question 10:

  An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites.

  How should the SE show the customer the firewall can detect that these websites are being accessed?

  A. Remove unwanted categories listed under "High Risk" and use relevant information
  B. Create a footnote within the SLR generation tool
  C. Edit the Key-Findings text to list the other types of categories that may be of interest
  D. Produce the report and edit the PDF manually
  A. Remove unwanted categories listed under "High Risk" and use relevant information