Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 21:

  Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

  A. M-200
  B. M-600
  C. M-100
  D. Panorama VM-Series
  D. Panorama VM-Series

• Question 22:

  Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer's current security posture?

  A. BPA
  B. PPA
  C. Expedition
  D. SLR
  A. BPA

• Question 23:

  Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)

  A. FTP
  B. HTTPS
  C. RTP
  D. HTTP
  B. HTTPS
  D. HTTP

• Question 24:

  Which filtering criterion is used to determine users to be included as members of a dynamic user group (DUG)?

  A. Security policy rule
  B. Tag
  C. Login ID
  D. IP address
  B. Tag

• Question 25:

  What three Tabs are available in the Detailed Device Health on Panorama for hardware-based firewalls? (Choose three.)

  A. Errors
  B. Environments
  C. Interfaces
  D. Mounts
  E. Throughput
  F. Sessions
  G. Status
  B. Environments
  C. Interfaces
  F. Sessions

• Question 26:

  A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds. How is this goal accomplished?

  A. Create a custom spyware signature matching the known signature with the time attribute
  B. Add a correlation object that tracks the occurrences and triggers above the desired threshold
  C. Submit a request to Palo Alto Networks to change the behavior at the next update
  D. Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency
  A. Create a custom spyware signature matching the known signature with the time attribute

• Question 27:

  Which two products can send logs to the Cortex Data Lake? (Choose two.)

  A. AutoFocus
  B. PA-3260 firewall
  C. Prisma Access
  D. Prisma Public Cloud
  B. PA-3260 firewall
  C. Prisma Access

• Question 28:

  In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)

  A. SaaS reports
  B. data filtering logs
  C. WildFire analysis reports
  D. threat logs
  E. botnet reports
  C. WildFire analysis reports
  D. threat logs
  E. botnet reports

• Question 29:

  A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture. What are two steps in this process? (Choose two.)

  A. Validate user identities through authentication
  B. Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall
  C. Categorize data and applications by levels of sensitivity
  D. Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls
  A. Validate user identities through authentication
  C. Categorize data and applications by levels of sensitivity

• Question 30:

  How frequently do WildFire signatures move into the antivirus database?

  A. every 24 hours
  B. every 12 hours
  C. once a week
  D. every 1 hour
  A. every 24 hours