Palo Alto Networks PSE-Platform Professional PSE-STRATA Questions & Answers

• Question 31:

  Which Palo Alto Networks security component should an administrator use to and NGFW policies to remote users?

  A. Prisma SaaS API

  B. Threat intelligence Cloud

  C. GlobalProtect

  D. Cortex XDR

  Correct Answer: C

• Question 32:

  A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today's security infrastructure.

  Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?

  A. SP3 (Single Pass Parallel Processing)

  B. GlobalProtect

  C. Threat Prevention

  D. Elastic Load Balancers

  Correct Answer: A

  Reference: https://www.paloguard.com/SP3-Architecture.asp

• Question 33:

  Which solution informs a customer concerned about zero-day targeted attacks whether an attack is specifically targeted at its property?

  A. AutoFocus

  B. Panorama Correlation Report

  C. Cortex XSOAR Community edition

  D. Cortex XDR Prevent

  Correct Answer: A

• Question 34:

  For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.)

  A. Network segments in the Datacenter need to be advertised to only one Service Connection

  B. The customer edge device needs to support policy-based routing with symmetric return functionality

  C. The resources in the Datacenter will only be able to reach remote network resources that share the same region

  D. A maximum of four service connections per Datacenter are supported with this topology

  Correct Answer: AD

• Question 35:

  Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?

  A. It processes each feature in a separate single pass with additional performance impact for each enabled feature.

  B. Its processing applies only to security features and does not include any networking features.

  C. It processes all traffic in a single pass with no additional performance impact for each enabled feature.

  D. It splits the traffic and processes all security features in a single pass and all network features in a separate pass

  Correct Answer: C

• Question 36:

  What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

  A. Enterprise CA-signed certificates

  B. Self-Signed certificates

  C. Intermediate certificates

  D. Private key certificates

  Correct Answer: AB

  Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/configure-ssl-forward-proxy#:~:text=You%20can%20use%20an%20enterprise,as%20the%20forward%20trust%20certificate.andtext=Certificate%20Name,.,unique%20name%20for%20each%20firewall

• Question 37:

  Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

  A. Quarantine

  B. Allow

  C. Reset

  D. Redirect

  E. Drop

  F. Alert

  Correct Answer: BCEF

  https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html

• Question 38:

  Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

  A. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

  B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25

  C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

  D. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

  Correct Answer: C

• Question 39:

  What are two presales selling advantages of using Expedition? (Choose two.)

  A. map migration gaps to professional services statement of Works (SOWs)

  B. streamline and migrate to Layer7 policies using Policy Optimizer

  C. reduce effort to implement policies based on App-ID and User-ID

  D. easy migration process to move to Palo Alto Networks NGFWs

  Correct Answer: AD

• Question 40:

  Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

  A. dedicated pair of decryption forwarding interfaces required per security chain

  B. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule

  C. a unique Decryption policy rule is required per security chain

  D. a single pair of decryption forwarding interfaces

  Correct Answer: BC