Palo Alto Networks Palo Alto Networks Certifications PSE-STRATA Questions & Answers

• Question 91:

  Which three signature-based Threat Prevention features of the firewall are informed by intelligence from the Threat Intelligence Cloud? (Choose three.)

  A. Vulnerability protection

  B. Anti-Spyware

  C. Anti-Virus

  D. Botnet detection

  E. App-ID protection

  Correct Answer: ABE

• Question 92:

  How frequently do WildFire signatures move into the antivirus database?

  A. every 24 hours

  B. every 12 hours

  C. once a week

  D. every 1 hour

  Correct Answer: A

  https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-concepts/wildfire-signatures

• Question 93:

  When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered? (Choose two.)

  A. retention requirements

  B. Traps agent forensic data

  C. the number of Traps agents

  D. agent size and OS

  Correct Answer: BD

• Question 94:

  Which three of the following actions must be taken to enable Credential Phishing Prevention? (Choose three.)

  A. Enable User Credential Detection

  B. Enable User-ID

  C. Define a Secure Sockets Layer (SSL) decryption rule base

  D. Enable App-ID

  E. Define a uniform resource locator (URL) Filtering profile

  Correct Answer: ABE

• Question 95:

  A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.

  Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

  A. Informs WildFire and sends up a signature to the Cloud

  B. Collects forensic information about the event

  C. Communicates the status of the endpoint to the ESM

  D. Notifies the user about the event

  E. Remediates the event by deleting the malicious file

  Correct Answer: BCD

  https://investors.paloaltonetworks.com/node/11156/html

• Question 96:

  WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through.

  Which command returns a valid result to verify the ML is working from the command line.

  A. show wfml cloud-status

  B. show mlav cloud-status

  C. show ml cloud-status

  D. show av cloud-status

  Correct Answer: B

• Question 97:

  Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-tasks.html

• Question 98:

  A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture.

  What are two steps in this process? (Choose two.)

  A. Validate user identities through authentication

  B. Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall

  C. Categorize data and applications by levels of sensitivity

  D. Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls

  Correct Answer: AC

• Question 99:

  The Palo Ao Networks Cloud Identity Engino (CIE) includes which service that supports identity Providers (ldP)?

  A. Directory Sync and Cloud Authentication Service that support IdP ung SAML 2.0 and OAuth2

  B. Cloud Authentication Service that supports IdP using SAML 2.0 and OAuth2

  C. Directory Sync and Cloud Authentication Service that support IdP ng SAML 2.0

  D. Directory Sync that supports IdP using SAML 2.0

  Correct Answer: A

• Question 100:

  What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?

  A. There are no benefits other than slight performance upgrades

  B. It allows Palo Alto Networks to add new functions to existing hardware

  C. Only one processor is needed to complete all the functions within the box

  D. It allows Palo Alto Networks to add new devices to existing hardware

  Correct Answer: B