Palo Alto Networks PSE-SASE Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SASE Online Questions & Answers

• Question 1:

  Which product enables websites to be rendered in a sandbox environment in order to detect and remove malware and threats before they reach the endpoint?

  A. remote browser isolation
  B. secure web gateway (SWG)
  C. network sandbox
  D. DNS Security
  B. secure web gateway (SWG)

• Question 2:

  Organizations that require remote browser isolation (RBI) to protect their users can automate connectivity to third-party RBI products with which platform?

  A. Zero Trust
  B. SaaS Security API
  C. GlobalProtect
  D. CloudBlades API
  A. Zero Trust

• Question 3:

  Which product draws on data collected through PAN-OS device telemetry to provide an overview of the health of an organization's next-generation firewall (NGFW) deployment and identify areas for improvement?

  A. Cloud Identity Engine (CIE)
  B. DNS Security
  C. security information and event management (SIEM)
  D. Device Insights
  D. Device Insights

• Question 4:

  What is a key benefit of CloudBlades?

  A. automation of UI workflow without any code development and deployment of Prisma SD-WAN ION devices
  B. utilization of near real-time analysis to detect previously unseen, targeted malware and advanced persistent threats
  C. identification of port-based rules so they can be converted to application-based rules without compromising application availability
  D. configuration of the authentication source once instead of for each authentication method used
  A. automation of UI workflow without any code development and deployment of Prisma SD-WAN ION devices

• Question 5:

  Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?

  A. >show sdwan connection all |
  B. >show sdwan session distribution policy-name
  C. >show sdwan path-monitor stats vif
  D. >show sdwan event
  D. >show sdwan event

• Question 6:

  A customer currently has 150 Mbps of capacity at a site. Records show that, on average, a total of 30 Mbps of bandwidth is used for the two links. What is the appropriate Prisma SD-WAN license for this site?

  A. 50 Mbps
  B. 175 Mbps
  C. 250 Mbps
  D. 25 Mbps
  A. 50 Mbps

• Question 7:

  What is a differentiator between the Palo Alto Networks secure access service edge (SASE) solution and competitor solutions?

  A. path analysis
  B. playbooks
  C. ticketing systems
  D. inspections
  A. path analysis

• Question 8:

  Which statement applies to Prisma Access licensing?

  A. Internet of Things (IOT) Security is included with each license.
  B. It provides cloud-based, centralized log storage and aggregation.
  C. It is a perpetual license required to enable support for multiple virtual systems on PA- 3200 Series firewalls.
  D. For remote network and Clean Pipe deployments, a unit is defined as 1 Mbps of bandwidth.
  D. For remote network and Clean Pipe deployments, a unit is defined as 1 Mbps of bandwidth.

• Question 9:

  Which three decryption methods are available in a security processing node (SPN)? (Choose three.)

  A. SSL Outbound Proxy
  B. SSHv2 Proxy
  C. SSL Forward Proxy
  D. SSL Inbound Inspection
  E. SSH Inbound Inspection
  B. SSHv2 Proxy
  C. SSL Forward Proxy
  D. SSL Inbound Inspection

• Question 10:

  In which step of the Five-Step Methodology for implementing the Zero Trust model are the services most valuable to the company defined?

  A. Step 2: Map the transaction flows
  B. Step 4: Create the Zero Trust policy
  C. Step 5: Monitor and maintain the network
  D. Step 1: Define the protect surface
  D. Step 1: Define the protect surface