Palo Alto Networks SASE Professional PSE-SASE Questions & Answers

• Question 51:

  In which step of the Five-Step Methodology for implementing the Zero Trust model does inspection and logging of all traffic take place?

  A. Step 4: Create the Zero Trust policy

  B. Step 3: Architect a Zero Trust network

  C. Step 1: Define the protect surface

  D. Step 5: Monitor and maintain the network

  Correct Answer: D

• Question 52:

  Which product enables websites to be rendered in a sandbox environment in order to detect and remove malware and threats before they reach the endpoint?

  A. remote browser isolation

  B. secure web gateway (SWG)

  C. network sandbox

  D. DNS Security

  Correct Answer: B

• Question 53:

  How does SaaS Security Inline provide a consistent management experience?

  A. user credentials required before accessing the resource

  B. uses advanced predictive analysis and machine learning (ML)

  C. automatically forwards samples for WildFire analysis

  D. integrates with existing security

  Correct Answer: D

• Question 54:

  What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices? (Choose two.)

  A. local area network (LAN) Dynamic Host Configuration Protocol (DHCP) and DHCP relay functionality

  B. control mode insertion without modification of existing network configuration

  C. network controller communication and monitoring

  D. ensures automatic failover when ION devices experience software or network related failure

  Correct Answer: D

• Question 55:

  In an SD-WAN deployment, what allows customers to modify resources in an automated fashion instead of logging on to a central controller or using command-line interface (CLI) to manage all their configurations?

  A. dynamic user group (DUG)

  B. DNS server

  C. application programming interface (API)

  D. WildFire

  Correct Answer: A

• Question 56:

  What is a disadvantage of proxy secure access service edge (SASE) when compared to an inline SASE solution?

  A. Proxies force policy actions to be treated as business decisions instead of compromises due to technical limitations.

  B. Teams added additional tools to web proxies that promised to solve point problems, resulting in a fragmented and ineffective security architecture.

  C. Proxy solutions require an unprecedented level of interconnectivity.

  D. Exclusive use of web proxies leads to significant blind spots in traffic and an inability to identify applications and threats on non-standard ports or across multiple protocols.

  Correct Answer: D

• Question 57:

  A customer currently uses a third-party proxy solution for client endpoints and would like to migrate to Prisma Access to secure mobile user internet-bound traffic.

  Which recommendation should the Systems Engineer make to this customer?

  A. With the explicit proxy license add-on, set up GlobalProtect.

  B. With the mobile user license, set up explicit proxy.

  C. With the explicit proxy license, set up a service connection.

  D. With the mobile user license, set up a corporate access node.

  Correct Answer: B

• Question 58:

  What is a key benefit of CloudBlades?

  A. automation of UI workflow without any code development and deployment of Prisma SD-WAN ION devices

  B. utilization of near real-time analysis to detect previously unseen, targeted malware and advanced persistent threats

  C. identification of port-based rules so they can be converted to application-based rules without compromising application availability

  D. configuration of the authentication source once instead of for each authentication method used

  Correct Answer: A

• Question 59:

  Which product leverages GlobalProtect agents for endpoint visibility and native Prisma SD- WAN integration for remote sites and branches?

  A. Cloud-Delivered Security Services (CDSS)

  B. WildFire

  C. CloudBlades:

  D. Autonomous Digital Experience Management (ADEM)

  Correct Answer: A

• Question 60:

  Which product draws on data collected through PAN-OS device telemetry to provide an overview of the health of an organization's next-generation firewall (NGFW) deployment and identify areas for improvement?

  A. Cloud Identity Engine (CIE)

  B. DNS Security

  C. security information and event management (SIEM)

  D. Device Insights

  Correct Answer: D