Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 11:

  Which three actions should be taken before deploying a firewall evaluation unt in a customer environment? (Choose three.)

  A. Request that the customer make part 3978 available to allow the evaluation unit to communicate with Panorama
  B. Inform the customer that a SPAN port must be provided for the evaluation unit, assuming a TAP mode deployment.
  C. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.
  D. Set expectations for information being presented in the Security Lifecycle Review (SLR) because personal user information will be made visible
  E. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed
  B. Inform the customer that a SPAN port must be provided for the evaluation unit, assuming a TAP mode deployment.
  C. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.
  E. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed

• Question 12:

  Decryption port mirroring is now supported on which platform?

  A. all hardware-based and VM-Series firewalls with the exception of VMware NSX. Citrix SDX, or public cloud hypervisors
  B. in hardware only
  C. only one the PA-5000 Series and higher
  D. all hardware-based and VM-Series firewalls regardless of where installed
  D. all hardware-based and VM-Series firewalls regardless of where installed

• Question 13:

  What are two benefits of the sinkhole Internet Protocol (IP) address that DNS Security sends to the client in place of malicious IP addresses? (Choose two.)

  A. The client communicates with it instead of the malicious IP address
  B. It represents the remediation server that the client should visit for patching
  C. It will take over as the new DNS resolver for that client and prevent further DNS requests from occurring in the meantime
  D. In situations where the internal DNS server is between the client and the firewall, it gives the firewall the ability to identify the clients who originated the query to the malicious domain
  A. The client communicates with it instead of the malicious IP address
  D. In situations where the internal DNS server is between the client and the firewall, it gives the firewall the ability to identify the clients who originated the query to the malicious domain

• Question 14:

  Which three new script types can be analyzed in WildFire? (Choose three.)

  A. VBScript
  B. JScript
  C. MonoScript
  D. PythonScript
  E. PowerShell Script
  A. VBScript
  B. JScript
  E. PowerShell Script

• Question 15:

  When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?

  A. X-Forwarded-For
  B. HTTP method
  C. HTTP response status code
  D. Content type
  A. X-Forwarded-For

• Question 16:

  Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

  A. dedicated pair of decryption forwarding interfaces required per security chain
  B. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule
  C. a unique Decryption policy rule is required per security chain
  D. a single pair of decryption forwarding interfaces
  B. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule
  C. a unique Decryption policy rule is required per security chain

• Question 17:

  Which two configuration elements can be used to prevent abuse of stolen credentials? (Choose two.)

  A. WildFire analysis
  B. Dynamic user groups (DUGs)
  C. Multi-factor authentication (MFA)
  D. URL Filtering Profiles
  C. Multi-factor authentication (MFA)
  D. URL Filtering Profiles

• Question 18:

  WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through.

  Which command returns a valid result to verify the ML is working from the command line.

  A. show wfml cloud-status
  B. show mlav cloud-status
  C. show ml cloud-status
  D. show av cloud-status
  B. show mlav cloud-status

• Question 19:

  What is the default behavior in PAN-OS when a 12 MB portable executable (PE) fe is forwarded to the WildFire cloud service?

  A. PE File is not forwarded.
  B. Flash file is not forwarded.
  C. PE File is forwarded
  D. Flash file is forwarded
  C. PE File is forwarded

• Question 20:

  A client chooses to not block uncategorized websites. Which two additions should be made to help provide some protection? (Choose two.)

  A. A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access
  B. A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites
  C. A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads
  D. A security policy rule using only known URL categories with the action set to allow
  A. A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access
  B. A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites