Palo Alto Networks Palo Alto Networks Certifications PSE-STRATA Questions & Answers

• Question 71:

  Which component is needed for a large-scale deployment of NGFWs with multiple Panorama Management Servers?

  A. M-600 appliance

  B. Panorama Interconnect plugin

  C. Panorama Large Scale VPN (LSVPN) plugin

  D. Palo Alto Networks Cluster license

  Correct Answer: B

• Question 72:

  Which three script types can be analyzed in WildFire? (Choose three)

  A. PythonScript

  B. MonoSenpt

  C. JScript

  D. PowerShell Script

  E. VBScript

  Correct Answer: ACE

• Question 73:

  Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)

  A. FTP

  B. HTTPS

  C. RTP

  D. HTTP

  Correct Answer: BD

• Question 74:

  There are different Master Keys on Panorama and managed firewalls.

  What is the result if a Panorama Administrator pushes configuration to managed firewalls?

  A. The push operation will fail regardless of an error or not within the configuration itself

  B. Provided there's no error within the configuration to be pushed, the push will succeed

  C. The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

  D. There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

  Correct Answer: A

  Reference: https://www.reddit.com/r/paloaltonetworks/comments/onz15y/what_is_the_result_if_a_pan orama_administrator/

• Question 75:

  How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?

  A. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)

  B. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)

  C. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)

  D. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)

  Correct Answer: C

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic-content-updates.html

• Question 76:

  A Fortune 500 customer has expressed interest in purchasing WildFire; however, they do not want to send discovered malware outside of their network.

  Which version of WildFire will meet this customer's requirements?

  A. WildFire Private Cloud

  B. WildFire Government Cloud

  C. WildFire Secure Cloud

  D. WildFire Public Cloud

  Correct Answer: A

• Question 77:

  Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

  A. use of decryption policies

  B. measure the adoption of URL filters. App-ID. User-ID

  C. use of device management access and settings

  D. expose the visibility and presence of command-and-control sessions

  E. identify sanctioned and unsanctioned SaaS applications

  Correct Answer: ABE

• Question 78:

  Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

  A. eDirectory monitoring

  B. Client Probing

  C. SNMP server

  D. TACACS

  E. Active Directory monitoring

  F. Lotus Domino

  G. RADIUS

  Correct Answer: BDG

  https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id-concepts/user-mapping

• Question 79:

  Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)

  A. Threat logs

  B. WildFire analysis reports

  C. Botnet reports

  D. Data filtering logs

  E. SaaS reports

  Correct Answer: BCD

• Question 80:

  An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)

  A. Daily

  B. Monthly

  C. Weekly

  D. Bi-weekly

  Correct Answer: AC