Palo Alto Networks SASE Professional PSE-SASE Questions & Answers

• Question 41:

  Which product enables organizations to open unknown files in a sandbox environment and scan them for malware or other threats?

  A. network sandbox

  B. SD-WAN

  C. cloud access security broker (CASB)

  D. remote browser isolation

  Correct Answer: A

• Question 42:

  Which product continuously monitors each segment from the endpoint to the application and identifies baseline metrics for each application?

  A. App-ID Cloud Engine (ACE)

  B. Autonomous Digital Experience Management (ADEM)

  C. CloudBlades

  D. WildFire

  Correct Answer: B

• Question 43:

  In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access 1.8?

  A. License bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.

  B. License bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.

  C. License bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.

  D. License bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.

  Correct Answer: C

• Question 44:

  What are two benefits provided to an organization using a secure web gateway (SWG)? (Choose two.)

  A. VPNs remain connected, reducing user risk exposure.

  B. Security policies for making internet access safer are enforced.

  C. Access to inappropriate websites or content is blocked based on acceptable use policies.

  D. An encrypted challenge-response mechanism obtains user credentials from the browser.

  Correct Answer: BC

• Question 45:

  How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?

  A. Users are mapped via server logs for login events and syslog messages from authenticating services.

  B. It uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.

  C. It prompts the browser to present a valid client certificate to authenticate the user.

  D. Users access the SWG, which then connects the user to the website while still performing security measures.

  Correct Answer: D

• Question 46:

  Which product allows advanced Layer 7 inspection, access control, threat detection and prevention?

  A. Infrastructure as a Service (IaaS)

  B. remote browser isolation

  C. network sandbox

  D. Firewall as a Service (FWaaS)

  Correct Answer: D

• Question 47:

  What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?

  A. Users, devices, and apps are identified no matter where they connect from.

  B. Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.

  C. Complexity of connecting to a gateway is increased, providing additional protection.

  D. Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.

  Correct Answer: A

• Question 48:

  The Cortex Data Lake sizing calculator for Prisma Access requires which three values as inputs? (Choose three.)

  A. throughput of remote networks purchased

  B. cloud-managed or Panorama-managed deployment

  C. retention period for the logs to be stored

  D. number of log-forwarding destinations

  E. number of mobile users purchased

  Correct Answer: ACE

• Question 49:

  Which elements of Autonomous Digital Experience Management (ADEM) help provide end- to-end visibility of everything in an organization's environment?

  A. integrated threat intelligence management, automated distribution to enforcement points at scale, full ticket mirroring

  B. scanning of all traffic, ports, and protocols

  C. data collected from endpoint devices, synthetic monitoring tests, and real-time traffic

  D. alerts, artifacts, and MITRE tactics

  Correct Answer: A

• Question 50:

  Organizations that require remote browser isolation (RBI) to protect their users can automate connectivity to third-party RBI products with which platform?

  A. Zero Trust

  B. SaaS Security API

  C. GlobalProtect

  D. CloudBlades API

  Correct Answer: A