Palo Alto Networks Palo Alto Networks Certifications PSE-PLATFORM Questions & Answers

• Question 51:

  Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

  A. WildFire on the firewall, and AutoFocus on Panorama

  B. URL Filtering on the firewall, and MindMeld on Panorama

  C. Threat Prevention on the firewall, and Support on Panorama

  D. GlobalProtect on the firewall, and Threat Prevention on Panorama

  Correct Answer: C

• Question 52:

  What two advantages of the DNS Sinkholing feature? (Choose two)

  A. It can be deployed independently of an Anti-Spyware Profile.

  B. It is monitoring DNS requests passively for malware domains.

  C. It can work upstream from the internal DNS server.

  D. It is forging DNS replies to known malicious domains.

  Correct Answer: CD

  Explanation: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dnssinkholing

• Question 53:

  A customer is adopting Microsoft Office 365 but is concerned about the potential security exposure that such a move could mean. The security analyst suggests using Aperture and the Palo Alto Network firewall together to provide data and network security.

  What are the two reasons this solution has been suggested? (Choose two.)

  A. The firewall secures data in transit between the network and the cloud.

  B. Aperture prevents users from using non-sanctioned SaaS applications.

  C. The firewall scans data that resides in the cloud for malware.

  D. Aperture scans data that resides in the cloud for sensitive information.

  Correct Answer: AB

• Question 54:

  Which three network events are highlighted through correlation objects as a potential security risks? (Choose three.)

  A. Identified vulnerability exploits

  B. Suspicious traffic patterns

  C. Known command-and-control activity

  D. Launch of an identified malware executable file

  E. Endpoints access files from a removable drive

  Correct Answer: ABC

• Question 55:

  Which two designs require virtual systems? (Choose two.)

  A. A shared gateway interface that does not need a full administrative boundary

  B. A virtual router as a replacement for an internet-facing router

  C. A single physical firewall shared by different organizations, each with unique traffic control needs

  D. A VMware NSX deployment that needs micros segmentation

  Correct Answer: BC

• Question 56:

  Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

  A. Create an anti-spyware profile to block all spyware

  B. Create a vulnerability protection profile to block all the vulnerabilities with severity low and higher

  C. Create an SSL Decryption policy to decrypt 100% of the traffic

  D. Create an antivirus profile to block all content that matches and antivirus signature

  E. Create a WildFire profile to schedule file uploads during low network usage windows

  Correct Answer: BCE

• Question 57:

  A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6,000,000 concurrent sessions.

  Which Network Processing Card should be recommended in the Bill of Materials?

  A. PA-7000-40G-NPC

  B. PA-7000-20GQ-NPC

  C. PA-7000-20GQXM-NPC

  D. PA-7000-20G-NPC

  Correct Answer: C

• Question 58:

  A customer is worried about unknown attacks, but due to privacy and regulatory issues, won't implement SSL decrypt.

  How can the platform still address this customer's concern?

  A. It pivots the conversation to Traps on the endpoint preventing unknown exploits and malware there instead.

  B. It bypasses the need to decrypt SSL Traffic by analyzing the file while still encrypted.

  C. It shows how AutoFocus can provide visibility into targeted attacks at the industry sector.

  D. It overcomes reservations about SSL decrypt by offloading to a higher capacity firewall to help with the decrypt throughput.

  Correct Answer: A

• Question 59:

  Palo Alto Networks publishes updated Command and Control signatures. How frequently should the related signatures schedule be set?

  A. Once an hour

  B. Once every minute

  C. Once a week

  D. Once a day

  Correct Answer: D

• Question 60:

  What are the three benefits of the Palo Alto Networks migration tool? (Choose three.)

  A. Conversion of existing firewall policies to Palo Alto Networks NGFW policies

  B. Analysis of existing firewall environment

  C. Assistance with the transition from POC to Production

  D. Elimination of the need for consulting/professional services

  E. The migration tool provides App-ID enhancements to improve Technical Support calls

  Correct Answer: ABC