Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 111:

  Which three script types can be analyzed in WildFire? (Choose three)

  A. PythonScript
  B. MonoSenpt
  C. JScript
  D. PowerShell Script
  E. VBScript
  A. PythonScript
  C. JScript
  E. VBScript

• Question 112:

  In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two.)

  A. Dedicated Logger Mode is required
  B. Logs per second exceed 10,000
  C. Appliance needs to be moved into data center
  D. Device count is under 100
  A. Dedicated Logger Mode is required
  B. Logs per second exceed 10,000

• Question 113:

  A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

  A. Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports.
  B. Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.
  C. Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis.
  D. Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default.
  B. Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.

• Question 114:

  In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

  A. HA3
  B. HA1
  C. HA2
  D. HA4
  C. HA2

• Question 115:

  Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)

  A. ELF
  B. 7-Zip
  C. Zip
  D. RAR
  B. 7-Zip
  D. RAR

• Question 116:

  What is the basis for purchasing Cortex XDR licensing?

  A. volume of logs being processed based on Datalake purchased
  B. number of nodes and endpoints providing logs
  C. unlimited licenses
  D. number of NGFWs
  B. number of nodes and endpoints providing logs

• Question 117:

  In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)

  A. TXT
  B. API
  C. CSV
  D. EDL
  A. TXT
  D. EDL

• Question 118:

  A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.

  Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

  A. Informs WildFire and sends up a signature to the Cloud
  B. Collects forensic information about the event
  C. Communicates the status of the endpoint to the ESM
  D. Notifies the user about the event
  E. Remediates the event by deleting the malicious file
  B. Collects forensic information about the event
  C. Communicates the status of the endpoint to the ESM
  D. Notifies the user about the event

• Question 119:

  in which step of the Palo Alto Networks Five-Step Zero Trust Methodology would an organization's critical data, applications, assets, and services (DAAS) be identified?

  A. Step 4. Create the Zero Trust policy.
  B. Step 2: Map the transaction flows.
  C. Step 3. Architect a Zero Trust network.
  D. Step 1: Define the protect surface
  D. Step 1: Define the protect surface

• Question 120:

  What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

  A. Enterprise CA-signed certificates
  B. Self-Signed certificates
  C. Intermediate certificates
  D. Private key certificates
  A. Enterprise CA-signed certificates
  B. Self-Signed certificates