Palo Alto Networks PSE-SASE Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-SASE Online Questions & Answers

• Question 1:

  How does Autonomous Digital Experience Management (ADEM) improve user experience?

  A. The root cause of any alert can be viewed with a single click, allowing users to swiftly stop attacks across the environment.
  B. The virtual appliance receives and stores firewall logs without using a local Log Collector, simplifying required steps users must take.
  C. Working from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.
  D. It applies in-depth hunting and forensics knowledge to identify and contain threats before they become a breach.
  C. Working from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.

• Question 2:

  In which step of the Five-Step Methodology for implementing the Zero Trust model are the services most valuable to the company defined?

  A. Step 2: Map the transaction flows
  B. Step 4: Create the Zero Trust policy
  C. Step 5: Monitor and maintain the network
  D. Step 1: Define the protect surface
  D. Step 1: Define the protect surface

• Question 3:

  What are three ways the secure access service edge (SASE) model can help an organization? (Choose three.)

  A. cost savings
  B. data protection
  C. increased licensing requirements
  D. increased performance
  E. decreased reliance on best practices
  A. cost savings
  B. data protection
  D. increased performance

• Question 4:

  Which two statements apply to features of aggregate bandwidth allocation in Prisma Access for remote networks? (Choose two.)

  A. Administrator can allocate up to 120% of the total bandwidth purchased for aggregate locations to support traffic peaks.
  B. Administrator must assign a minimum of 50 MB to any compute location that will support remote networks.
  C. Administrator is not required to allocate all purchased bandwidth to compute locations for the configuration to be valid.
  D. Bandwidth that is allocated to a compute location is statically and evenly distributed across remote networks in that location.
  A. Administrator can allocate up to 120% of the total bandwidth purchased for aggregate locations to support traffic peaks.
  C. Administrator is not required to allocate all purchased bandwidth to compute locations for the configuration to be valid.

• Question 5:

  What is a benefit of the Palo Alto Networks secure access service edge (SASE) solution's ability to provide insight into SD-WAN and network security metrics while highlighting critical issues across all managed tenants?

  A. It rearchitects the way signatures are delivered, performing updates and streaming them to the firewall within seconds after the analysis is done.
  B. It helps protect inbound, outbound, and east-west traffic between container workload types in Kubernetes environments without slowing development speed.
  C. It simplifies workflows and instantly automates common use cases with hundreds of prebuilt playbooks.
  D. It helps managed service providers (MSPs) accelerate troubleshooting and meet service level agreements (SLAs) for all their customers.
  D. It helps managed service providers (MSPs) accelerate troubleshooting and meet service level agreements (SLAs) for all their customers.

• Question 6:

  A customer currently has 150 Mbps of capacity at a site. Records show that, on average, a total of 30 Mbps of bandwidth is used for the two links. What is the appropriate Prisma SD-WAN license for this site?

  A. 50 Mbps
  B. 175 Mbps
  C. 250 Mbps
  D. 25 Mbps
  A. 50 Mbps

• Question 7:

  Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.

  Which proxy should be used to decrypt this traffic?

  A. SCP Proxy
  B. SSL Inbound Proxy
  C. SSH Forward Proxy
  D. SSL Forward Proxy
  B. SSL Inbound Proxy

• Question 8:

  Which App Response Time metric is the measure of network latency?

  A. Round Trip Time (RTT)
  B. Server Response Time (SRT)
  C. Network Transfer Time (NTTn)
  D. UDP Response Time (UDP-TRT)
  A. Round Trip Time (RTT)

• Question 9:

  What happens when SaaS Security sees a new or unknown SaaS application?

  A. It forwards the application for WildFire analysis.
  B. It uses machine learning (ML) to classify the application.
  C. It generates alerts regarding changes in performance.
  D. It extends the branch perimeter to the closest node with high performance.
  A. It forwards the application for WildFire analysis.

• Question 10:

  What is an advantage of the unified approach of the Palo Alto Networks secure access service edge (SASE) platform over the use of multiple point products?

  A. It allows for automation of ticketing tasks and management of tickets without pivoting between various consoles.
  B. It scans all traffic, ports, and protocols and automatically discovers new apps.
  C. It turns threat intelligence and external attack surface data into an intelligent data foundation to dramatically accelerate threat response.
  D. It reduces network and security complexity while increasing organizational agility.
  D. It reduces network and security complexity while increasing organizational agility.