Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 1:

  Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

  A. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
  B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25
  C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25
  D. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
  C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

• Question 2:

  Which two features can be enabled to support asymmetric routing with redundancy on a Palo Alto networks next-generation firewall (NGFW)? (Choose two.)

  A. Active / active high availability (HA)
  B. Multiple virtual systems
  C. non-SYN first packet
  D. Asymmetric routing profile
  A. Active / active high availability (HA)
  C. non-SYN first packet

• Question 3:

  What are two advantages of the DNS Sinkholing feature? (Choose two.)

  A. It forges DNS replies to known malicious domains.
  B. It monitors DNS requests passively for malware domains.
  C. It can be deployed independently of an Anti-Spyware Profile.
  D. It can work upstream from the internal DNS server.
  A. It forges DNS replies to known malicious domains.
  D. It can work upstream from the internal DNS server.

• Question 4:

  Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

  A. Once a day
  B. Once a week
  C. Once every minute
  D. Once an hour
  B. Once a week

• Question 5:

  Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

  A. Traffic is separated by zones
  B. Policy match is based on application
  C. Identification of application is possible on any port
  D. Traffic control is based on IP port, and protocol
  B. Policy match is based on application
  C. Identification of application is possible on any port

• Question 6:

  WildFire subscription supports analysis of which three types? (Choose three.)

  A. GIF
  B. 7-Zip
  C. Flash
  D. RPM
  E. ISO
  F. DMG
  B. 7-Zip
  C. Flash
  E. ISO

• Question 7:

  What are two ways to manually add and remove members of dynamic user groups (DUGs)? (Choose two)

  A. Add the user to an external dynamic list (EDL).
  B. Tag the user using Panorama or the Web Ul of the firewall.
  C. Tag the user through the firewalls XML API.
  D. Tag the user through Active Directory
  B. Tag the user using Panorama or the Web Ul of the firewall.
  C. Tag the user through the firewalls XML API.

• Question 8:

  A customer is concerned about zero-day targeted attacks against its intellectual property. Which solution informs a customer whether an attack is specifically targeted at them?

  A. Traps TMS
  B. AutoFocus
  C. Panorama Correlation Report
  D. Firewall Botnet Report
  D. Firewall Botnet Report

• Question 9:

  An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

  A. DNS Sinkholing
  B. DNS Proxy
  C. Anti-Spyware Signatures
  D. Wildfire Analysis
  A. DNS Sinkholing

• Question 10:

  What is an advantage of having WildFire machine learning (ML) capability Inline on the firewall?

  A. It eliminates of the necessity for dynamic analysis in the cloud
  B. It enables the firewall to block unknown malicious files in real time and prevent patient zero without disrupting business productivity
  C. It is always able to give more accurate verdicts than the cloud ML analysis reducing false positives and false negatives
  D. It improves the CPU performance of content inspection
  B. It enables the firewall to block unknown malicious files in real time and prevent patient zero without disrupting business productivity