Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 41:

  Which three of the following actions must be taken to enable Credential Phishing Prevention? (Choose three.)

  A. Enable User Credential Detection
  B. Enable User-ID
  C. Define a Secure Sockets Layer (SSL) decryption rule base
  D. Enable App-ID
  E. Define a uniform resource locator (URL) Filtering profile
  A. Enable User Credential Detection
  B. Enable User-ID
  E. Define a uniform resource locator (URL) Filtering profile

• Question 42:

  Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 43:

  Which three signature-based Threat Prevention features of the firewall are informed by intelligence from the Threat Intelligence Cloud? (Choose three.)

  A. Vulnerability protection
  B. Anti-Spyware
  C. Anti-Virus
  D. Botnet detection
  E. App-ID protection
  A. Vulnerability protection
  B. Anti-Spyware
  E. App-ID protection

• Question 44:

  Which task would be identified in Best Practice Assessment tool?

  A. identify the visibility and presence of command-and-control sessions
  B. identify sanctioned and unsanctioned SaaS applications
  C. identify the threats associated with each application
  D. identify and provide recommendations for device management access
  B. identify sanctioned and unsanctioned SaaS applications

• Question 45:

  Which profile or policy should be applied to protect against port scans from the internet?

  A. Interface management profile on the zone of the ingress interface
  B. Zone protection profile on the zone of the ingress interface
  C. An App-ID security policy rule to block traffic sourcing from the untrust zone
  D. Security profiles to security policy rules for traffic sourcing from the untrust zone
  B. Zone protection profile on the zone of the ingress interface

• Question 46:

  Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

  A. Include all traffic types in decryption policy
  B. Inability to access websites
  C. Exclude certain types of traffic in decryption policy
  D. Deploy decryption setting all at one time
  E. Ensure throughput is not an issue
  A. Include all traffic types in decryption policy
  B. Inability to access websites
  C. Exclude certain types of traffic in decryption policy

• Question 47:

  What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)

  A. Benign
  B. Spyware
  C. Malicious
  D. Phishing
  E. Grayware
  A. Benign
  C. Malicious
  D. Phishing
  E. Grayware

• Question 48:

  What will best enhance security of a production online system while minimizing the impact for the existing network?

  A. Layer 2 interfaces
  B. active / active high availability (HA)
  C. Virtual wire
  D. virtual systems
  C. Virtual wire

• Question 49:

  What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

  A. allow the request and all subsequent responses
  B. temporarily disable the DNS Security function
  C. block the query
  D. discard the request and all subsequent responses
  A. allow the request and all subsequent responses

• Question 50:

  Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)

  A. breach the perimeter
  B. weaponize vulnerabilities
  C. lateral movement
  D. exfiltrate data
  E. recon the target
  F. deliver the malware
  A. breach the perimeter
  C. lateral movement
  D. exfiltrate data
  F. deliver the malware