Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 131:

  XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)

  A. Virtual systems
  B. HA active/active
  C. HA active/passive
  D. Policy-based forwarding
  B. HA active/active
  D. Policy-based forwarding

• Question 132:

  Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)

  A. Network Tab
  B. Policies Tab
  C. Device Tab
  D. Objects Tab
  A. Network Tab
  C. Device Tab

• Question 133:

  Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

  A. WildFire hybrid deployment
  B. 5 minute WildFire updates to threat signatures
  C. Access to the WildFire API
  D. PE file upload to WildFire
  D. PE file upload to WildFire

• Question 134:

  What action would address the sub-optimal traffic path shown in the figure?

  

  Key: RN -Remote Network SC -Service Connection MU GW -Mobile User Gateway

  A. Onboard a Service Connection in the Americas region
  B. Remove the Service Connection in the EMEA region
  C. Onboard a Service Connection in the APAC region
  D. Onboard a Remote Network location in the EMEA region
  C. Onboard a Service Connection in the APAC region

• Question 135:

  Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

  A. Connector
  B. Database C. Recipient
  D. Operator
  E. Attribute
  F. Schedule
  A. Connector
  D. Operator
  E. Attribute

• Question 136:

  Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 137:

  Which two features are key in preventing unknown targeted attacks? (Choose two)

  A. nighty botnet report
  B. App-ID with the Zero Trust model
  C. WildFire Cloud threat analysis
  D. Single Pass Parallel Processing (SP3)
  B. App-ID with the Zero Trust model
  C. WildFire Cloud threat analysis

• Question 138:

  A customer is designing a private data center to host their new web application along with a separate headquarters for users. Which cloud-delivered security service (CDSS) would be recommended for the headquarters only?

  A. Threat Prevention
  B. DNS Security
  C. WildFire
  D. Advanced URL Filtering (AURLF)
  A. Threat Prevention

• Question 139:

  When having a customer pre-sales call, which aspects of the NGFW should be covered?

  A. The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
  B. The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content --malware, phishing, and C2 are updated every five minutes --to ensure that you can manage access to these sites within minutes of categorization
  C. The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor
  D. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing
  D. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing