Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 31:

  A Fortune 500 customer has expressed interest in purchasing WildFire; however, they do not want to send discovered malware outside of their network.

  Which version of WildFire will meet this customer's requirements?

  A. WildFire Private Cloud
  B. WildFire Government Cloud
  C. WildFire Secure Cloud
  D. WildFire Public Cloud
  A. WildFire Private Cloud

• Question 32:

  As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

  A. access key ID
  B. secret access key
  C. administrative Password
  D. AWS account ID
  A. access key ID

• Question 33:

  A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

  A. File Blocking Profile
  B. DoS Protection Profile
  C. URL Filtering Profile
  D. Vulnerability Protection Profile
  A. File Blocking Profile

• Question 34:

  What helps avoid split brain in active / passive high availability (HA) pair deployment?

  A. Enable preemption on both firewalls in the HA pair.
  B. Use a standard traffic interface as the HA3 link.
  C. Use the management interface as the HA1 backup link
  D. Use a standard traffic interface as the HA2 backup
  C. Use the management interface as the HA1 backup link

• Question 35:

  Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?

  A. User ID and Device-ID
  B. Source-D and Network.ID
  C. Source ID and Device-ID
  D. User-ID and Source-ID
  A. User ID and Device-ID

• Question 36:

  For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.)

  A. Network segments in the Datacenter need to be advertised to only one Service Connection
  B. The customer edge device needs to support policy-based routing with symmetric return functionality
  C. The resources in the Datacenter will only be able to reach remote network resources that share the same region
  D. A maximum of four service connections per Datacenter are supported with this topology
  A. Network segments in the Datacenter need to be advertised to only one Service Connection
  D. A maximum of four service connections per Datacenter are supported with this topology

• Question 37:

  Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

  A. Generate a Stats Dump File and upload it to the Palo Alto Networks support portal
  B. Select Panorama > Licenses and click Activate feature using authorization code
  C. Generate a Tech Support File and call PANTAC
  D. Select Device > Licenses and click Activate feature using authorization code
  B. Select Panorama > Licenses and click Activate feature using authorization code

• Question 38:

  When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

  A. 1500 to 2500 bytes
  B. 10MB to 30 MB
  C. 1MB to 5 MB
  D. 100MB to 200 MB
  D. 100MB to 200 MB

• Question 39:

  An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?

  A. Create a footnote within the SLR generation tool
  B. Edit the Key-Findings text to list the other types of categories that may be of interest
  C. Remove unwanted categories listed under 'High Risk' and use relevant information
  D. Produce the report and edit the PDF manually
  C. Remove unwanted categories listed under 'High Risk' and use relevant information

• Question 40:

  WildFire can discover zero-day malware in which three types of traffic? (Choose three)

  A. SMTP
  B. HTTPS
  C. FTP
  D. DNS
  E. TFTP
  A. SMTP
  B. HTTPS
  C. FTP