Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 71:

  XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)

  A. Policy-based forwarding
  B. HA active/active
  C. Virtual systems
  D. HA active/passive
  A. Policy-based forwarding
  B. HA active/active

• Question 72:

  A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at 100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

  A. VM-200
  B. VM-100
  C. VM-50
  D. VM-300
  C. VM-50

• Question 73:

  Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?

  A. It processes each feature in a separate single pass with additional performance impact for each enabled feature.
  B. Its processing applies only to security features and does not include any networking features.
  C. It processes all traffic in a single pass with no additional performance impact for each enabled feature.
  D. It splits the traffic and processes all security features in a single pass and all network features in a separate pass
  C. It processes all traffic in a single pass with no additional performance impact for each enabled feature.

• Question 74:

  Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

  A. Quarantine
  B. Allow
  C. Reset
  D. Redirect
  E. Drop
  F. Alert
  B. Allow
  C. Reset
  E. Drop
  F. Alert

• Question 75:

  A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today's security infrastructure.

  Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?

  A. SP3 (Single Pass Parallel Processing)
  B. GlobalProtect
  C. Threat Prevention
  D. Elastic Load Balancers
  A. SP3 (Single Pass Parallel Processing)

• Question 76:

  Access to a business site is blocked by URL Filtering inline machine learning (ML) and considered as a false-positive. How should the site be made available?

  A. Disable URL Filtering inline ML
  B. Create a custom URL category and add it to the Security policy
  C. Create a custom URL category and add it on exception of the inline ML profile
  D. Change the action of real-time detection category on URL filtering profile
  C. Create a custom URL category and add it on exception of the inline ML profile

• Question 77:

  A customer requires protections and verdicts for portable executable (PE) and executable and linkable format (ELF), as well as the ability to integrate with existing security tools. Which Cloud-Delivered Security Service (CDSS) does Palo Alto Networks provide that will address this requirement?

  A. Dynamic Unpacking
  B. WildFire
  C. DNS Security
  D. File Blocking profile
  B. WildFire

• Question 78:

  Prisma SaaS provides which two SaaS threat prevention capabilities? (Choose two)

  A. shellcode protection
  B. file quarantine
  C. SaaS AppID signatures
  D. WildFire analysis
  E. remote procedural call (RPC) interrogation
  C. SaaS AppID signatures
  D. WildFire analysis

• Question 79:

  In PAN-OS 10.0 and later, DNS Security allows policy actions to be applied based on which three domains? (Choose three.)

  A. grayware
  B. command and control (C2)
  C. benign
  D. government
  E. malware
  A. grayware
  C. benign
  E. malware

• Question 80:

  Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)

  A. Threat logs
  B. WildFire analysis reports
  C. Botnet reports
  D. Data filtering logs
  E. SaaS reports
  B. WildFire analysis reports
  C. Botnet reports
  D. Data filtering logs