Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 91:

  Which three platform components can identify and protect against malicious email links? (Choose three.)

  A. WildFire hybrid cloud solution
  B. WildFire public cloud
  C. WF-500
  D. M-200
  E. M-600
  B. WildFire public cloud
  C. WF-500
  D. M-200

• Question 92:

  Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

  A. WildFire on the firewall, and AutoFocus on Panorama
  B. Threat Prevention on the firewall, and Support on Panorama
  C. GlobalProtect on the firewall, and Threat Prevention on Panorama
  D. URL Filtering on the firewall, and MineMeld on Panorama
  B. Threat Prevention on the firewall, and Support on Panorama

• Question 93:

  What are three considerations when deploying User-ID? (Choose three.)

  A. Specify included and excluded networks when configuring User-ID
  B. Only enable User-ID on trusted zones
  C. Use a dedicated service account for User-ID services with the minimal permissions necessary
  D. User-ID can support a maximum of 15 hops
  E. Enable WMI probing in high security networks
  A. Specify included and excluded networks when configuring User-ID
  B. Only enable User-ID on trusted zones
  C. Use a dedicated service account for User-ID services with the minimal permissions necessary

• Question 94:

  How do you configure the rate of file submissions to WildFire in the NGFW?

  A. based on the purchased license uploaded
  B. QoS tagging
  C. maximum number of files per minute
  D. maximum number of files per day
  C. maximum number of files per minute

• Question 95:

  Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server? (Choose three.)

  A. Domain Administrators
  B. Enterprise Administrators
  C. Distributed COM Users
  D. Event Log Readers
  E. Server Operator
  A. Domain Administrators
  D. Event Log Readers
  E. Server Operator

• Question 96:

  Which are the three mandatory components needed to run Cortex XDR? (Choose three.)

  A. Panorama
  B. NGFW with PANOS 8 0.5 or later
  C. Cortex Data Lake
  D. Traps
  E. Pathfinder
  F. Directory Syn Service
  B. NGFW with PANOS 8 0.5 or later
  C. Cortex Data Lake
  F. Directory Syn Service

• Question 97:

  Which built-in feature of PAN-OS allows the NGFW administrator to create a policy that provides autoremediation for anomalous user behavior and malicious activity while maintaining user visibility?

  A. Dynamic user groups (DUGS)
  B. tagging groups
  C. remote device User-ID groups
  D. dynamic address groups (DAGs)
  A. Dynamic user groups (DUGS)

• Question 98:

  Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

  A. it requires the Vulnerability Protection profile to be enabled
  B. DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates
  C. infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs
  D. It requires a Sinkhole license in order to activate
  C. infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

• Question 99:

  The Palo Ao Networks Cloud Identity Engino (CIE) includes which service that supports identity Providers (ldP)?

  A. Directory Sync and Cloud Authentication Service that support IdP ung SAML 2.0 and OAuth2
  B. Cloud Authentication Service that supports IdP using SAML 2.0 and OAuth2
  C. Directory Sync and Cloud Authentication Service that support IdP ng SAML 2.0
  D. Directory Sync that supports IdP using SAML 2.0
  A. Directory Sync and Cloud Authentication Service that support IdP ung SAML 2.0 and OAuth2

• Question 100:

  There are different Master Keys on Panorama and managed firewalls.

  What is the result if a Panorama Administrator pushes configuration to managed firewalls?

  A. The push operation will fail regardless of an error or not within the configuration itself
  B. Provided there's no error within the configuration to be pushed, the push will succeed
  C. The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama
  D. There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls
  A. The push operation will fail regardless of an error or not within the configuration itself