Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 101:

  The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security. The firewall provides which three types of reports? (Choose three.)

  A. SNMP Reports
  B. PDF Summary Reports
  C. Netflow Reports
  D. Botnet Reports
  E. User or Group Activity Reports
  C. Netflow Reports
  D. Botnet Reports
  E. User or Group Activity Reports

• Question 102:

  What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)

  A. when you're delivering a security strategy
  B. when client's want to see the power of the platform
  C. provide users visibility into the applications currently allowed on the network
  D. help streamline the deployment and migration of NGFWs
  E. assess the state of NGFW feature adoption
  B. when client's want to see the power of the platform
  C. provide users visibility into the applications currently allowed on the network
  E. assess the state of NGFW feature adoption

• Question 103:

  Which two methods are used to check for Corporate Credential Submissions? (Choose two.)

  A. doman credentialiter
  B. User-ID credential check
  C. LDAP query
  D. IP user mapping
  A. doman credentialiter
  B. User-ID credential check

• Question 104:

  Which two types of security chains are supported by the Decryption Broker? (Choose two.)

  A. virtual wire
  B. transparent bridge
  C. Layer 3
  D. Layer 2
  B. transparent bridge
  C. Layer 3

• Question 105:

  When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered? (Choose two.)

  A. retention requirements
  B. Traps agent forensic data
  C. the number of Traps agents
  D. agent size and OS
  B. Traps agent forensic data
  D. agent size and OS

• Question 106:

  What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)

  A. Next-generation firewalls deployed with WildFire Analysis Security Profiles
  B. WF-500 configured as private clouds for privacy concerns
  C. Correlation Objects generated by AutoFocus
  D. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
  E. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS
  C. Correlation Objects generated by AutoFocus
  D. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
  E. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS

• Question 107:

  The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTP decoder for URL filtering is handled by which component in the NGFW?

  A. First Packet Processor
  B. Stream-based Signature Engine
  C. SIA (Scan It All) Processing Engine
  D. Security Processing Engine
  B. Stream-based Signature Engine

• Question 108:

  Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

  A. eDirectory monitoring
  B. Client Probing
  C. SNMP server
  D. TACACS
  E. Active Directory monitoring
  F. Lotus Domino
  G. RADIUS
  B. Client Probing
  D. TACACS
  G. RADIUS

• Question 109:

  A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).

  Which Security profile is used to configure Domain Name Security (DNS) to Identity and block previously unknown DGA-based threats in real time?

  A. URL Filtering profile
  B. WildFire Analysis profile
  C. Vulnerability Protection profile
  D. Anti-Spyware profile
  D. Anti-Spyware profile

• Question 110:

  Which statement best describes the business value of Palo Alto Networks Zero Touch Provisioning (ZTP)?

  A. It is designed to simplify and automate the onboarding of new firewalls to the Panorama management server.
  B. When it is in place, it removes the need for an onsite firewall
  C. When the service is purchased, Palo Alto Networks sends an engineer to physically deploy the firewall to the customer environment
  D. It allows a firewall to be automatically connected to the local network wirelessly
  A. It is designed to simplify and automate the onboarding of new firewalls to the Panorama management server.