Palo Alto Networks PSE-Platform Professional PSE-STRATA Questions & Answers

• Question 121:

  Which security profile on the NGFW includes signatures to protect you from brute force attacks?

  A. Zone Protection Profile

  B. URL Filtering Profile

  C. Vulnerability Protection Profile

  D. Anti-Spyware Profile

  Correct Answer: C

• Question 122:

  XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)

  A. Policy-based forwarding

  B. HA active/active

  C. Virtual systems

  D. HA active/passive

  Correct Answer: AB

  https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/route-based-redundancy

• Question 123:

  Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

  A. Identified vulnerability exploits

  B. Launch of an identified malware executable file

  C. Endpoints access files from a removable drive

  D. Suspicious host behavior

  Correct Answer: AD

• Question 124:

  When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?

  A. X-Forwarded-For

  B. HTTP method

  C. HTTP response status code

  D. Content type

  Correct Answer: A

• Question 125:

  Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)

  A. define an SSL decryption rulebase

  B. enable User-ID

  C. validate credential submission detection

  D. enable App-ID

  E. define URL Filtering Profile

  Correct Answer: BCE

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html

• Question 126:

  Which task would be identified in Best Practice Assessment tool?

  A. identify the visibility and presence of command-and-control sessions

  B. identify sanctioned and unsanctioned SaaS applications

  C. identify the threats associated with each application

  D. identify and provide recommendations for device management access

  Correct Answer: B

• Question 127:

  Which three actions should be taken before deploying a firewall evaluation unt in a customer environment? (Choose three.)

  A. Request that the customer make part 3978 available to allow the evaluation unit to communicate with Panorama

  B. Inform the customer that a SPAN port must be provided for the evaluation unit, assuming a TAP mode deployment.

  C. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.

  D. Set expectations for information being presented in the Security Lifecycle Review (SLR) because personal user information will be made visible

  E. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed

  Correct Answer: BCE

• Question 128:

  What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)

  A. Benign

  B. Spyware

  C. Malicious

  D. Phishing

  E. Grayware

  Correct Answer: ACDE

  Reference: https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/monitor-wildfire-activity/use-the-firewall-to-monitor-malware/monitor-wildfire-submissions-and-analysis-reports.html

• Question 129:

  Which two products can send logs to the Cortex Data Lake? (Choose two.)

  A. AutoFocus

  B. PA-3260 firewall

  C. Prisma Access

  D. Prisma Public Cloud

  Correct Answer: BC

  https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/forward-logs-to-cortex-data-lake

• Question 130:

  XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

  Which two features must be enabled to meet the customer's requirements? (Choose two.)

  A. Virtual systems

  B. HA active/active

  C. HA active/passive

  D. Policy-based forwarding

  Correct Answer: BD