Palo Alto Networks Palo Alto Networks Certifications PSE-PLATFORM Questions & Answers

• Question 21:

  In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two)

  A. Dedicated Logger Mode is required

  B. Logs per second exceed 10,000

  C. Appliance needs to be moved into data center

  D. Device count is under 100

  Correct Answer: AB

• Question 22:

  Which three signature-based Threat Prevention features of the firewall are informed by intelligence from the Threat Intelligence Cloud? (Choose three.)

  A. Vulnerability protection

  B. Anti-Spyware

  C. Anti-Virus

  D. Botnet detection

  E. App-ID protection

  Correct Answer: ABE

• Question 23:

  How often are regularly scheduled update for the Anti-virus Application, Threats, and Wildfire subscription databases made available by Palo Alto Networks in PAN-OS 8.0?

  A. Anti-Virus (Daily) Application (Weekly), Threats (Daily), Wildfire (5 Minutes)

  B. Anti-Virus (Weekly) Application (Daily), Threats (Daily), Wildfire (5 Minutes)

  C. Anti-Virus (Daily) Application (Weekly), Threats (Weekly), Wildfire (5 Minutes)

  D. Anti-Virus (Weekly) Application (Daily), Threats (Weekly), Wildfire (5 Minutes)

  Correct Answer: C

• Question 24:

  Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

  A. Allow

  B. Drop

  C. Quarantine

  D. Redirect

  E. Alert

  F. Reset

  Correct Answer: ABEF

  Explanation: https://www.paloaltonetworks.com/documentation/71/pan-os/pan- os/policy/anti-spywareprofiles.html

• Question 25:

  XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

  Which two features must be enabled to meet the customer's requirements? (Choose two.)

  A. Virtual systems

  B. HA active/active

  C. Policy-based forwarding

  D. HA active/passive

  Correct Answer: BC

  Explanation: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high- availability/routebased-redundancy

• Question 26:

  What is the recommended way to ensure that firewalls have the most current set of signatures for up-todate protection?

  A. Store updates on an intermediary server and point all the firewalls to it

  B. Monitor update announcements and manually push updates to firewalls

  C. Utilize dynamic updates with an aggressive update schedule

  D. Run a Perl script to regularly check for updates and alert when one in released

  Correct Answer: B

• Question 27:

  What is a best practice when configuring a security policy to completely block a specific application?

  A. One the Service/URL. Category tab, set the service to any

  B. On the Actions tab, configure a file blocking security profile

  C. On the Service/URL. Category tab, set the service to application-default

  D. On the Service/URL. Category tab, manually specify a port/service

  Correct Answer: A

• Question 28:

  Given the following network diagram, an administrator is considering the use of Windows Log Forwarding and Global Catalog servers for User-ID implementation.

  What are two potential bandwidth and processing bottlenecks to consider? (Choose two.)

  

  A. Member Servers

  B. Firewall

  C. Domain Controllers

  D. Windows Server

  Correct Answer: AC

• Question 29:

  Which configuration creates the most comprehensive "best-practice" Anti Spyware profile to prevent command and Control traffic?

  A. Clone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

  B. Clone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

  C. Edit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

  D. Edit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

  Correct Answer: A

• Question 30:

  A client chooses to not block uncategorized websites.

  Which two additions should be made to help provide some protection? (Choose two.)

  A. A security policy rule using only known URL categories with the action set to allow

  B. A file blocking profile to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

  C. A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

  D. A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

  Correct Answer: AC