What is the default behavior in PAN-OS when a 12 MB portable executable (PE) fe is forwarded to the WildFire cloud service?
A. PE File is not forwarded.
B. Flash file is not forwarded.
C. PE File is forwarded
D. Flash file is forwarded
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)
A. Traffic is separated by zones
B. Policy match is based on application
C. Identification of application is possible on any port
D. Traffic control is based on IP port, and protocol
What are two advantages of the DNS Sinkholing feature? (Choose two.)
A. It forges DNS replies to known malicious domains.
B. It monitors DNS requests passively for malware domains.
C. It can be deployed independently of an Anti-Spyware Profile.
D. It can work upstream from the internal DNS server.
Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?
A. WildFire on the firewall, and AutoFocus on Panorama
B. Threat Prevention on the firewall, and Support on Panorama
C. GlobalProtect on the firewall, and Threat Prevention on Panorama
D. URL Filtering on the firewall, and MineMeld on Panorama
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
A. ELF
B. 7-Zip
C. Zip
D. RAR
What are two benefits of the sinkhole Internet Protocol (IP) address that DNS Security sends to the client in place of malicious IP addresses? (Choose two.)
A. The client communicates with it instead of the malicious IP address
B. It represents the remediation server that the client should visit for patching
C. It will take over as the new DNS resolver for that client and prevent further DNS requests from occurring in the meantime
D. In situations where the internal DNS server is between the client and the firewall, it gives the firewall the ability to identify the clients who originated the query to the malicious domain
Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?
A. User ID and Device-ID
B. Source-D and Network.ID
C. Source ID and Device-ID
D. User-ID and Source-ID
Which two steps are required to configure the Decryption Broker? (Choose two.)
A. reboot the firewall to activate the license
B. activate the Decryption Broker license
C. enable SSL Forward Proxy decryption
D. enable a pair of virtual wire interfaces to forward decrypted traffic
A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?
A. File Blocking Profile
B. DoS Protection Profile
C. URL Filtering Profile
D. Vulnerability Protection Profile
Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer's current security posture?
A. BPA
B. PPA
C. Expedition
D. SLR
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Palo Alto Networks exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your PSE-STRATA exam preparations and Palo Alto Networks certification application, do not hesitate to visit our Vcedump.com to find your solutions here.