Palo Alto Networks PSE-Platform Professional PSE-STRATA Questions & Answers

• Question 131:

  What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

  A. Run a Perl script to regularly check for updates and alert when one is released

  B. Monitor update announcements and manually push updates to Crewall

  C. Store updates on an intermediary server and point all the firewalls to it

  D. Use dynamic updates with the most aggressive schedule required by business needs

  Correct Answer: D

• Question 132:

  Which two features are key in preventing unknown targeted attacks? (Choose two)

  A. nighty botnet report

  B. App-ID with the Zero Trust model

  C. WildFire Cloud threat analysis

  D. Single Pass Parallel Processing (SP3)

  Correct Answer: BC

• Question 133:

  Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

  A. Prototype

  B. Inputs

  C. Class

  D. Feed Base URL

  Correct Answer: D

  https://live.paloaltonetworks.com/t5/minemeld-articles/connecting-pan-os-to-minemeld-using-external-dynamic-lists/ta-p/190414

• Question 134:

  A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).

  Which Security profile is used to configure Domain Name Security (DNS) to Identity and block previously unknown DGA-based threats in real time?

  A. URL Filtering profile

  B. WildFire Analysis profile

  C. Vulnerability Protection profile

  D. Anti-Spyware profile

  Correct Answer: D

• Question 135:

  Which profile or policy should be applied to protect against port scans from the internet?

  A. Interface management profile on the zone of the ingress interface

  B. Zone protection profile on the zone of the ingress interface

  C. An App-ID security policy rule to block traffic sourcing from the untrust zone

  D. Security profiles to security policy rules for traffic sourcing from the untrust zone

  Correct Answer: B

• Question 136:

  An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?

  A. Create a footnote within the SLR generation tool

  B. Edit the Key-Findings text to list the other types of categories that may be of interest

  C. Remove unwanted categories listed under 'High Risk' and use relevant information

  D. Produce the report and edit the PDF manually

  Correct Answer: C

• Question 137:

  Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)

  A. breach the perimeter

  B. weaponize vulnerabilities

  C. lateral movement

  D. exfiltrate data

  E. recon the target

  F. deliver the malware

  Correct Answer: ACDF

• Question 138:

  DRAG DROP

  Match the functions to the appropriate processing engine within the dataplane.

  Select and Place:

  

  Correct Answer:

  

• Question 139:

  DRAG DROP

  Match the WildFire Inline Machine Learning Model to the correct description for that model.

  Select and Place:

  

  Correct Answer: