Palo Alto Networks SASE Professional PSE-SASE Questions & Answers

• Question 21:

  What is an advantage of next-generation SD-WAN over legacy SD-WAN solutions?

  A. It enables definition of the privileges and responsibilities of administrative users in a network.

  B. It allows configuration to forward logs to external logging destinations, such as syslog servers.

  C. It steers traffic and defines networking and security policies from an application-centric perspective, rather than a packet-based approach.

  D. It provides the ability to push common configurations, configuration updates, and software upgrades to all or a subset of the managed appliances.

  Correct Answer: C

• Question 22:

  What is feature of Autonomous Digital Experience Management (ADEM)?

  A. It applies configuration changes and provides credential management, role-based controls, and a playbook repository.

  B. It provides customized forms to collect and validate necessary parameters from the requester.

  C. It natively ingests, normalizes, and integrates granular data across the security infrastructure at nearly half the cost of legacy security products attempting to solve the problem.

  D. It provides IT teams with single-pane visibility that leverages endpoint, simulated, and real-time user traffic data to provide the most complete picture of user traffic flows possible.

  Correct Answer: D

• Question 23:

  Which element of a secure access service edge (SASE)-enabled network provides true integration of services, not service chains, with combined services and visibility for all locations, mobile users, and the cloud?

  A. identity and network location

  B. broad network-edge support

  C. converged WAN edge and network security

  D. cloud-native, cloud-based delivery

  Correct Answer: D

• Question 24:

  Which three decryption methods are available in a security processing node (SPN)? (Choose three.)

  A. SSL Outbound Proxy

  B. SSHv2 Proxy

  C. SSL Forward Proxy

  D. SSL Inbound Inspection

  E. SSH Inbound Inspection

  Correct Answer: BCD

• Question 25:

  What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?

  A. A heartbeat connection between the firewall peers ensures seamless failover in the event that a peer goes down.

  B. It prepares the keys and certificates required for decryption, creating decryption profiles and policies, and configuring decryption port mirroring.

  C. Protection is offered in the cloud through a unified platform for complete visibility and precise control over web access while enforcing security policies that protect users from hostile websites.

  D. It creates tunnels that allow users and systems to connect securely over a public network as if they were connecting over a local area network (LAN).

  Correct Answer: C

• Question 26:

  Which App Response Time metric measures the amount of time it takes to transfer incoming data from an external server to a local client?

  A. UDP Response Time (UDP-TRT)

  B. Server Response Time (SRT)

  C. Network Transfer Time (NTTn)

  D. Round Trip Time (RTT)

  Correct Answer: D

• Question 27:

  Which two key benefits have been identified for a customer investing in the Palo Alto Networks Prisma secure access service edge (SASE) solution? (Choose two.)

  A. decreased likelihood of a data breach

  B. reduced input required from management during third-party investigations

  C. decreased need for interaction between branches

  D. reduced number of security incidents requiring manual investigation

  Correct Answer: BD

• Question 28:

  Which statement describes the data loss prevention (DLP) add-on?

  A. It prevents phishing attacks by controlling the sites to which users can submit valid corporate credentials.

  B. It employs automated policy enforcement to allow trusted behavior with a new Device-ID policy construct.

  C. It is a centrally delivered cloud service with unified detection policies that can be embedded in existing control points.

  D. It enables data sharing with third-party tools such as security information and event management (SIEM) systems.

  Correct Answer: C

• Question 29:

  What is a differentiator between the Palo Alto Networks secure access service edge (SASE) solution and competitor solutions?

  A. path analysis

  B. playbooks

  C. ticketing systems

  D. inspections

  Correct Answer: A

• Question 30:

  In which step of the Five-Step Methodology for implementing the Zero Trust model is the Kipling Method relevant?

  A. Step 3: Architect a Zero Trust network

  B. Step 5: Monitor and maintain the network

  C. Step 4: Create the Zero Trust policy

  D. Step 2: Map the transaction flows

  Correct Answer: C