Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 121:

  A packet that is already associated with a current session arrives at the firewall.

  What is the flow of the packet after the firewall determines that it is matched with an existing session?

  A. it is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through a single stream-based content inspection engine before egress.
  B. It is sent through the slow path for further inspection. If subject to content inspection, it will pass through a single stream-based content inspection engines before egress
  C. It is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through multiple content inspection engines before egress
  D. It is sent through the slow path for further inspection. If subject to content inspection, it will pass through multiple content inspection engines before egress
  A. it is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through a single stream-based content inspection engine before egress.

• Question 122:

  Which Palo Alto Networks security component should an administrator use to and NGFW policies to remote users?

  A. Prisma SaaS API
  B. Threat intelligence Cloud
  C. GlobalProtect
  D. Cortex XDR
  C. GlobalProtect

• Question 123:

  Which statement is true about Deviating Devices and metrics?

  A. A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation
  B. Deviating Device Tab is only available with a SD-WAN Subscription
  C. An Administrator can set the metric health baseline along with a valid standard deviation
  D. Deviating Device Tab is only available for hardware-based firewalls
  A. A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation

• Question 124:

  A prospective customer currently uses a firewall that provides only Layer 4 inspection and protections. The customer sees traffic going to an external destination, port 53, but cannot determine what Layer 7 application traffic is going over that port

  Which capability of PAN-OS would address the customer's lack of visibility?

  A. Device ID, because it will give visibility into which devices are communicating with external destinations over port 53
  B. single pass architecture (SPA), because it will improve the performance of the Palo Alto Networks Layer 7 inspection
  C. User-ID, because it will allow the customer to see which users are sending traffic to external destinations over port 53
  D. App-ID, because it will give visibility into what exact applications are being run over that port and allow the customer to block unsanctioned applications using port 53
  D. App-ID, because it will give visibility into what exact applications are being run over that port and allow the customer to block unsanctioned applications using port 53

• Question 125:

  What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

  A. A vulnerability profile to security policy rules that deny general web access
  B. An antivirus profile to security policy rules that deny general web access
  C. A zone protection profile to the untrust zone
  D. A file blocking profile to security policy rules that allow general web access
  D. A file blocking profile to security policy rules that allow general web access

• Question 126:

  What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

  A. operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)
  B. improved revenue due to more efficient network traffic throughput
  C. Increased security due to scalable cloud delivered security Services (CDSS)
  D. Cost savings due to reduction in IT management effort and device
  B. improved revenue due to more efficient network traffic throughput
  C. Increased security due to scalable cloud delivered security Services (CDSS)
  D. Cost savings due to reduction in IT management effort and device

• Question 127:

  Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

  A. User Mapping
  B. Proxy Authentication
  C. Group Mapping
  D. 802.1X Authentication
  A. User Mapping
  C. Group Mapping

• Question 128:

  DRAG DROP

  Match the WildFire Inline Machine Learning Model to the correct description for that model.

  Select and Place:

  

  

• Question 129:

  What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

  A. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.
  B. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary
  C. It can automatically create address groups for use with KVM.
  D. It can bootstrap the virtual firewalls for dynamic deployment scenarios.
  A. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.
  D. It can bootstrap the virtual firewalls for dynamic deployment scenarios.

• Question 130:

  Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

  A. use of decryption policies
  B. measure the adoption of URL filters. App-ID. User-ID
  C. use of device management access and settings
  D. expose the visibility and presence of command-and-control sessions
  E. identify sanctioned and unsanctioned SaaS applications
  A. use of decryption policies
  B. measure the adoption of URL filters. App-ID. User-ID
  E. identify sanctioned and unsanctioned SaaS applications